Unscored severity · published Jan 27, 2005
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service…
–
CVSS
9.5%
EPSS
No
On KEV
Description
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.5% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CU
Cups · Easy Software Products
1.0.4; 1.0.4_8; 1.1.1; 1.1.4; 1.1.4_2; 1.1.4_3; +14 more · source: NVD
DL
Debian Linux · Debian
3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +6 more · source: NVD
EL
Enterprise Linux · Redhat
2.1; 2.1; 2.1; 2.1; 2.1; 2.1; +3 more · source: NVD
EL
Enterprise Linux Desktop · Redhat
3.0 · source: NVD
FC
Fedora Core · Redhat
core_2.0 · source: NVD
GP
Gpdf · Gnome
0.112; 0.131 · source: NVD
KD
Kde · Kde
3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 · source: NVD
KO
Koffice · Kde
1.3; 1.3.1; 1.3.2; 1.3.3; 1.3_beta1; 1.3_beta2; +1 more · source: NVD
KP
Kpdf · Kde
3.2 · source: NVD
LI
Linux · Gentoo
All versions, or not specified · source: NVD
LA
Linux Advanced Workstation · Redhat
2.1; 2.1 · source: NVD
PD
Pdftohtml · Pdftohtml
0.32a; 0.32b; 0.33; 0.33a; 0.34; 0.35; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0888
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0888
distro.conectiva.com.br
http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886
marc.info
http://marc.info/?l=bugtraq&m=109880927526773&w=2
marc.info
http://marc.info/?l=bugtraq&m=110815379627883&w=2
www.debian.org
http://www.debian.org/security/2004/dsa-573
www.debian.org
http://www.debian.org/security/2004/dsa-581
www.debian.org
http://www.debian.org/security/2004/dsa-599
More from Debian Linux
10.0
CVE-2025-32433
Erlang/OTP SSH Vulnerable to Pre-Authentication RCE
10.0
CVE-2025-24201
Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability
10.0
CVE-2021-44228
Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints
10.0
CVE-2015-3306
ProFTPD Improper Access Control Vulnerability
9.8
CVE-2026-24061
GNU InetUtils Argument Injection Vulnerability