# CVEs published 2004-10-26

12 CVEs were published on October 26, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0685](https://cve.now/CVE-2004-0685.md): Certain USB drivers in the Linux 2.4 kernel use the copy\_to\_user function on uninitialized structures, which could allow local users to… (no CVSS)
- [CVE-2004-0803](https://cve.now/CVE-2004-0803.md): Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer… (no CVSS)
- [CVE-2004-0816](https://cve.now/CVE-2004-0816.md): Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2004-0886](https://cve.now/CVE-2004-0886.md): Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption)… (no CVSS)
- [CVE-2004-0887](https://cve.now/CVE-2004-0887.md): SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users… (no CVSS)
- [CVE-2004-0888](https://cve.now/CVE-2004-0888.md): Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote… (no CVSS)
- [CVE-2004-0889](https://cve.now/CVE-2004-0889.md): Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of… (no CVSS)
- [CVE-2004-0923](https://cve.now/CVE-2004-0923.md): CUPS 1.1.20 and earlier records authentication information for a device URI in the error\_log file, which allows local users to obtain user… (no CVSS)
- [CVE-2004-0929](https://cve.now/CVE-2004-0929.md): Heap-based buffer overflow in the OJPEGVSetField function in tif\_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the… (no CVSS)
- [CVE-2004-0940](https://cve.now/CVE-2004-0940.md): Buffer overflow in the get\_tag function in mod\_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to… (no CVSS)
- [CVE-2004-0965](https://cve.now/CVE-2004-0965.md): stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to… (no CVSS)
- [CVE-2004-0985](https://cve.now/CVE-2004-0985.md): Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2004-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.