What’s Vulnerable › Vulnerabilities

CVE-2004-0889

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 6.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-01-27 · updated 2026-06-16

Description

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

Affected products

• Debian Linux: 3.0
• Easy Software Products Cups: 1.0.4, 1.0.4_8, 1.1.1, 1.1.4, 1.1.4_2, 1.1.4_3 (+14)
• gentoo Linux: all versions
• GNOME Gpdf: 0.112, 0.131
• Kde: 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
• KDE Koffice: 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3_beta1, 1.3_beta2 (+1)
• KDE Kpdf: 3.2
• Pdftohtml: 0.32a, 0.32b, 0.33, 0.33a, 0.34, 0.35 (+1)
• Red Hat Enterprise Linux: 2.1, 3.0
• RedHat Enterprise Linux Desktop: 3.0
• RedHat Fedora Core: core_2.0
• RedHat Linux Advanced Workstation: 2.1
• Suse Linux: 8.0, 8.1, 8.2, 9.0, 9.1, 9.2
• Tetex: 1.0.7, 2.0, 2.0.1, 2.0.2
• Ubuntu Linux: 4.1
• Xpdf: 0.90, 0.91, 0.92, 0.93, 1.0, 1.0a (+5)

References

• http://marc.info/?l=bugtraq&m=109880927526773&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml
• http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:113
• http://www.securityfocus.com/bid/11501
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17819
• http://marc.info/?l=bugtraq&m=109880927526773&w=2
• http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml
• http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml
• http://www.mandriva.com/security/advisories?name=MDKSA-2004:113
• http://www.securityfocus.com/bid/11501
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17819

Get alerted when CVE-2004-0889 or the next vulnerability affects your stack