CVE-2004-0888 Integer overflow in n/a
Remote attackers can cause denial of service or execute arbitrary code via integer overflows in xpdf and dependent applications.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2004-0888?
CVE-2004-0888 is a critical vulnerability in Debian Debian Linux, published on 26 Oct 2004. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Which versions are affected by CVE-2004-0888?
It affects 16 products.
Linux distribution packages (8)
xpdf Red Hat:enterprise_linux:3::as | All versions | 1:2.02-9.3 |
xpdf-debuginfo Red Hat:enterprise_linux:3::as | All versions | 1:2.02-9.3 |
xpdf Red Hat:enterprise_linux:3::desktop | All versions | 1:2.02-9.3 |
xpdf-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 1:2.02-9.3 |
xpdf Red Hat:enterprise_linux:3::es | All versions | 1:2.02-9.3 |
xpdf-debuginfo Red Hat:enterprise_linux:3::es | All versions | 1:2.02-9.3 |
xpdf Red Hat:enterprise_linux:3::ws | All versions | 1:2.02-9.3 |
xpdf-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 1:2.02-9.3 |
Products include Debian Debian Linux, Easy Software Products Cups, Gentoo Linux, Gnome Gpdf, Kde Kde, Kde Koffice and 10 more.
How do I fix CVE-2004-0888?
Apply the vendor's patch.
Is CVE-2004-0888 being exploited?
There is no known exploitation of CVE-2004-0888 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as DEBIAN-CVE-2004-0888, DSA-573-1, DSA-581-1, DSA-599-1, GHSA-x479-x3mc-r9mr, RHSA-2004:592.