CVE-2004-0889

Description

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

References

http://marc.info/?l=bugtraq&m=109880927526773&w=2

http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml

http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml

http://www.mandriva.com/security/advisories?name=MDKSA-2004:113

http://www.securityfocus.com/bid/11501

https://exchange.xforce.ibmcloud.com/vulnerabilities/17819

Details

Risk Information

CVSS v2