CVE-2004-0889

Publication date 27 January 2005

Last updated 17 July 2025


Ubuntu priority

Description

Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888.

Status

Package Ubuntu Release Status
kdegraphics 7.04 feisty
Fixed in 3.5.2-0ubuntu6
6.10 edgy
Fixed in 3.5.2-0ubuntu6
6.06 LTS dapper
Fixed in 3.5.2-0ubuntu6
koffice 7.04 feisty
Fixed in 1.6.2-0ubuntu1.1
6.10 edgy
Fixed in 1.5.2-0ubuntu2.2
6.06 LTS dapper
Fixed in 1.5.0-0ubuntu9.2
xpdf 7.04 feisty
Fixed in 3.01-9ubuntu3
6.10 edgy
Fixed in 3.01-9ubuntu1.1
6.06 LTS dapper
Fixed in 3.01-7ubuntu0.1

References

Related Ubuntu Security Notices (USN)

    • USN-14-1
    • xpdf vulnerabilities
    • 2 November 2004
    • USN-2-1
    • xpdf vulnerabilities
    • 23 October 2004

Other references


Access our resources on patching vulnerabilities