PT-2004-1926 · Apple · Cups

Chris Evans · Publicado 2004-10-26 · Atualizado 2017-07-11 · CVE-2004-0889

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: xpdf version 3.0 CUPS (affected versions not specified)

Description: The issue is related to multiple integer overflows in the xpdf code, which can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and possibly allowing the execution of arbitrary code.

Recommendations: For xpdf version 3.0, update to a version that fixes the integer overflows. For CUPS, apply the necessary patches or updates to address the vulnerabilities in the xpdf code used by CUPS. At the moment, there is no information about a newer version that contains a fix for this vulnerability in CUPS.

Correção

Identificadores relacionados

CVE-2004-0889

Produtos afetados

Cups

Referências · 11

• http://mandriva.com/security/advisories?name=MDKSA-2004:113 · Aviso do Fabricante
• http://gentoo.org/security/en/glsa/glsa-200410-20.xml · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2004-0889 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2004-0889 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109880927526773&w=2 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0889 · Aviso do Fabricante
• http://securityfocus.com/bid/11501 · Nota
• http://gentoo.org/security/en/glsa/glsa-200410-30.xml · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0889 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17819 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0889 · Nota