CVSS: 9.3EPSS: 4%CPEs: 4EXPL: 0CVE-2004-1125
https://notcve.org/view.php?id=CVE-2004-1125
22 Dec 2004 — Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded. • ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch • CWE-20: Improper Input Validation •
CVSS: 9.1EPSS: 0%CPEs: 51EXPL: 0CVE-2004-0927
https://notcve.org/view.php?id=CVE-2004-0927
28 Oct 2004 — ServerAdmin in Mac OS X 10.2.8 through 10.3.5 uses the same example self-signed certificate on each system, which allows remote attackers to decrypt sessions. • http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html •
CVSS: 9.8EPSS: 0%CPEs: 51EXPL: 0CVE-2004-0924
https://notcve.org/view.php?id=CVE-2004-0924
28 Oct 2004 — NetInfo Manager on Mac OS X 10.3.x through 10.3.5, after an initial root login, reports the root account as being disabled, even when it has not. • http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html •
CVSS: 10.0EPSS: 2%CPEs: 51EXPL: 0CVE-2004-0926
https://notcve.org/view.php?id=CVE-2004-0926
28 Oct 2004 — Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image. • http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html •
CVSS: 5.5EPSS: 0%CPEs: 51EXPL: 0CVE-2004-0923
https://notcve.org/view.php?id=CVE-2004-0923
26 Oct 2004 — CUPS 1.1.20 and earlier records authentication information for a device URI in the error_log file, which allows local users to obtain user names and passwords. • http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html •
CVSS: 10.0EPSS: 5%CPEs: 93EXPL: 0CVE-2004-0889
https://notcve.org/view.php?id=CVE-2004-0889
26 Oct 2004 — Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888. • http://marc.info/?l=bugtraq&m=109880927526773&w=2 •
CVSS: 10.0EPSS: 7%CPEs: 93EXPL: 0CVE-2004-0888
https://notcve.org/view.php?id=CVE-2004-0888
26 Oct 2004 — Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0889. • http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000886 •
CVSS: 7.5EPSS: 3%CPEs: 1EXPL: 2CVE-2004-0558 – CUPS 1.1.x - UDP Packet Remote Denial of Service
https://notcve.org/view.php?id=CVE-2004-0558
17 Sep 2004 — The Internet Printing Protocol (IPP) implementation in CUPS before 1.1.21 allows remote attackers to cause a denial of service (service hang) via a certain UDP packet to the IPP port. La implementación del Protocolo de Impresión de Internet (IPP) en CUPS anteriores a 1.1.21 permite a atacantes remotos causar una denegación de servicio (cuelgue del servicio) mediante cierto paquete UDP al puerto IPP. • https://www.exploit-db.com/exploits/24599 •
CVSS: 7.5EPSS: 2%CPEs: 17EXPL: 0CVE-2003-0788
https://notcve.org/view.php?id=CVE-2003-0788
06 Nov 2003 — Unknown vulnerability in the Internet Printing Protocol (IPP) implementation in CUPS before 1.1.19 allows remote attackers to cause a denial of service (CPU consumption from a "busy loop") via certain inputs to the IPP port (TCP 631). Vulnerabilidad desconocida en la implementación del Internet Printing Protocol (IPP) en CUPS anteriores a 1.1.19 permite a atacantes remotos causar una denegación de servicio (consumición de CPU por un "bucle ocupado") mediante ciertas entradas al puerto IPP (TCP 631). • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=97958 •
CVSS: 7.8EPSS: 0%CPEs: 20EXPL: 1CVE-2002-1384
https://notcve.org/view.php?id=CVE-2002-1384
02 Jan 2003 — Integer overflow in pdftops, as used in Xpdf 2.01 and earlier, xpdf-i, and CUPS before 1.1.18, allows local users to execute arbitrary code via a ColorSpace entry with a large number of elements, as demonstrated by cups-pdf. Desbordamiento de enteros en pdftops, usado en Xpdf 2.01 y anteriores, y CUPS antes de 1.1.18, permite a usuarios locales ejecutar código arbitrario mediante una entrada ColorSpace con un número de elementos largo, como ha sido demostrado por cups-pdf. • http://marc.info/?l=bugtraq&m=104152282309980&w=2 •