PT-2004-1926 · Apple · Cups

Chris Evans · Published 2004-10-26 · Updated 2017-07-11 · CVE-2004-0889

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: xpdf version 3.0 CUPS (affected versions not specified)

Description: The issue is related to multiple integer overflows in the xpdf code, which can be exploited by remote attackers to cause a denial of service, potentially leading to a crash, and possibly allowing the execution of arbitrary code.

Recommendations: For xpdf version 3.0, update to a version that fixes the integer overflows. For CUPS, apply the necessary patches or updates to address the vulnerabilities in the xpdf code used by CUPS. At the moment, there is no information about a newer version that contains a fix for this vulnerability in CUPS.

Fix

Related Identifiers

CVE-2004-0889

Affected Products

Cups

References · 11

• http://mandriva.com/security/advisories?name=MDKSA-2004:113 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200410-20.xml · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2004-0889 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2004-0889 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=109880927526773&w=2 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-0889 · Vendor Advisory
• http://gentoo.org/security/en/glsa/glsa-200410-30.xml · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0889 · Security Note
• http://securityfocus.com/bid/11501 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17819 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0889 · Note