© 2026 vulntracker.io

CVE-2004-0888

N/A

Published: October 26, 2004 at 04:00 AM UTC

Updated: June 16, 2026 at 10:06 PM UTC

16 products affected across 11 vendorsDebian LinuxUbuntu LinuxEnterprise Linux

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 10%

Description

Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Ubuntu Linux · Canonicalrubygems

95%

Debian Linux · Debiandrupal

95%

Cups · Easy Software Products

95%

1.0.4 1.0.4_8 1.1.1 1.1.10 1.1.12 1.1.13 1.1.14 1.1.15 1.1.16 1.1.17 1.1.18 1.1.19 1.1.19_rc5 1.1.20 1.1.4 1.1.4_2 1.1.4_3 1.1.4_5 1.1.6 1.1.7

Linux · Gentoo

95%

All versions

95%

95%

3.2 3.2.1 3.2.2 3.2.3 3.3 3.3.1

95%

1.3 1.3.1 1.3.2 1.3.3 1.3_beta1 1.3_beta2 1.3_beta3

95%

Pdftohtml · Pdftohtml

95%

0.32a 0.32b 0.33 0.33a 0.34 0.35 0.36

Enterprise Linux · Red Hatrpm

95%

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (21)

Vendor Advisoryx_refsource_CONECTIVA

Source: [email protected]

http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886

Vendor Advisoryx_refsource_SUSE

Source: [email protected]

http://marc.info/?l=bugtraq&m=109880927526773&w=2

Vendor Advisoryx_refsource_FEDORA

Source: [email protected]

http://marc.info/?l=bugtraq&m=110815379627883&w=2

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2004/dsa-573

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2004/dsa-581

Vendor Advisoryx_refsource_DEBIAN

Source: [email protected]

http://www.debian.org/security/2004/dsa-599

Vendor Advisoryx_refsource_GENTOO

Source: [email protected]

http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml

Vendor Advisoryx_refsource_GENTOO

Source: [email protected]

http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml

CVSS

10HIGH[email protected]

Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Vector?

Quick Info

StatusMODIFIED

CWE

NVD-CWE-Other

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create account Sign in

Free plan, no card