CVE-2004-0889

high

Description

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

References

http://marc.info/?l=bugtraq&m=109880927526773&w=2

http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml

http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2004:113

http://www.securityfocus.com/bid/11501

https://exchange.xforce.ibmcloud.com/vulnerabilities/17819

Details

Source: MITRE

Published: 2005-01-27

Updated: 2017-07-11

Risk Information

CVSS v2

Base Score: 10

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 10

Severity: HIGH