# CVEs published 2004-10-26

12 CVEs were published on October 26, 2004: 0 critical, 0 high. Days are UTC.

- [CVE-2004-0685](https://cve.now/CVE-2004-0685.md): Certain USB drivers in the Linux 2.4 kernel use the copy\_to\_user function on uninitialized structures, which could allow local users to obta (no CVSS)
- [CVE-2004-0803](https://cve.now/CVE-2004-0803.md): Multiple vulnerabilities in the RLE (run length encoding) decoders for libtiff 3.6.1 and earlier, related to buffer overflows and integer ov (no CVSS)
- [CVE-2004-0816](https://cve.now/CVE-2004-0816.md): Integer underflow in the firewall logging rules for iptables in Linux before 2.6.8 allows remote attackers to cause a denial of service (app (no CVSS)
- [CVE-2004-0886](https://cve.now/CVE-2004-0886.md): Multiple integer overflows in libtiff 3.6.1 and earlier allow remote attackers to cause a denial of service (crash or memory corruption) via (no CVSS)
- [CVE-2004-0887](https://cve.now/CVE-2004-0887.md): SUSE Linux Enterprise Server 9 on the S/390 platform does not properly handle a certain privileged instruction, which allows local users to (no CVSS)
- [CVE-2004-0888](https://cve.now/CVE-2004-0888.md): Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta (no CVSS)
- [CVE-2004-0889](https://cve.now/CVE-2004-0889.md): Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv (no CVSS)
- [CVE-2004-0923](https://cve.now/CVE-2004-0923.md): CUPS 1.1.20 and earlier records authentication information for a device URI in the error\_log file, which allows local users to obtain user n (no CVSS)
- [CVE-2004-0929](https://cve.now/CVE-2004-0929.md): Heap-based buffer overflow in the OJPEGVSetField function in tif\_ojpeg.c for libtiff 3.6.1 and earlier, when compiled with the OJPEG\_SUPPORT (no CVSS)
- [CVE-2004-0940](https://cve.now/CVE-2004-0940.md): Buffer overflow in the get\_tag function in mod\_include for Apache 1.3.x to 1.3.32 allows local users who can create SSI documents to execute (no CVSS)
- [CVE-2004-0965](https://cve.now/CVE-2004-0965.md): stmkfont in HP-UX B.11.00 through B.11.23 relies on the user-specified PATH when executing certain commands, which allows local users to exe (no CVSS)
- [CVE-2004-0985](https://cve.now/CVE-2004-0985.md): Internet Explorer 6.x on Windows XP SP2 allows remote attackers to execute arbitrary code, as demonstrated using a document with a draggable (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2004-10-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.