CVE-2005-0206 The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users e...
HighCVSS 7.5
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ascii ptex | = 3.1.4 | No fix listed |
| cstex cstetex | = 2.0.2 | No fix listed |
| easy software products cups | = 1.0.4 | No fix listed |
| easy software products cups | = 1.0.4_8 | No fix listed |
| easy software products cups | = 1.1.1 | No fix listed |
| easy software products cups | = 1.1.4 | No fix listed |
| easy software products cups | = 1.1.4_2 | No fix listed |
| easy software products cups | = 1.1.4_3 | No fix listed |
| easy software products cups | = 1.1.4_5 | No fix listed |
| easy software products cups | = 1.1.6 | No fix listed |
| easy software products cups | = 1.1.7 | No fix listed |
| easy software products cups | = 1.1.10 | No fix listed |
| easy software products cups | = 1.1.12 | No fix listed |
| easy software products cups | = 1.1.13 | No fix listed |
| easy software products cups | = 1.1.14 | No fix listed |
| easy software products cups | = 1.1.15 | No fix listed |
| easy software products cups | = 1.1.16 | No fix listed |
| easy software products cups | = 1.1.17 | No fix listed |
| easy software products cups | = 1.1.18 | No fix listed |
| easy software products cups | = 1.1.19 | No fix listed |
| easy software products cups | = 1.1.19_rc5 | No fix listed |
| easy software products cups | = 1.1.20 | No fix listed |
| GNOME gpdf | = 0.110 | No fix listed |
| GNOME gpdf | = 0.112 | No fix listed |
| GNOME gpdf | = 0.131 | No fix listed |
Show 86 more
| Product | Affected versions | Fixed in |
|---|---|---|
| KDE koffice | = 1.3 | No fix listed |
| KDE koffice | = 1.3.1 | No fix listed |
| KDE koffice | = 1.3.2 | No fix listed |
| KDE koffice | = 1.3.3 | No fix listed |
| KDE koffice | = 1.3_beta1 | No fix listed |
| KDE koffice | = 1.3_beta2 | No fix listed |
| KDE koffice | = 1.3_beta3 | No fix listed |
| KDE kpdf | = 3.2 | No fix listed |
| pdftohtml | = 0.32a | No fix listed |
| pdftohtml | = 0.32b | No fix listed |
| pdftohtml | = 0.33 | No fix listed |
| pdftohtml | = 0.33a | No fix listed |
| pdftohtml | = 0.34 | No fix listed |
| pdftohtml | = 0.35 | No fix listed |
| pdftohtml | = 0.36 | No fix listed |
| sgi propack | = 3.0 | No fix listed |
| tetex | = 1.0.6 | No fix listed |
| tetex | = 1.0.7 | No fix listed |
| tetex | = 2.0 | No fix listed |
| tetex | = 2.0.1 | No fix listed |
| tetex | = 2.0.2 | No fix listed |
| xpdf | = 0.90 | No fix listed |
| xpdf | = 0.91 | No fix listed |
| xpdf | = 0.92 | No fix listed |
| xpdf | = 0.93 | No fix listed |
| xpdf | = 1.0 | No fix listed |
| xpdf | = 1.0a | No fix listed |
| xpdf | = 1.1 | No fix listed |
| xpdf | = 2.0 | No fix listed |
| xpdf | = 2.1 | No fix listed |
| xpdf | = 2.3 | No fix listed |
| xpdf | = 3.0 | No fix listed |
| sgi advanced linux environment | = 3.0 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| gentoo linux | All versions | No fix listed |
| kde | = 3.2 | No fix listed |
| kde | = 3.2.1 | No fix listed |
| kde | = 3.2.2 | No fix listed |
| kde | = 3.2.3 | No fix listed |
| kde | = 3.3 | No fix listed |
| kde | = 3.3.1 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 3.0 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat fedora core | = core_1.0 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| redhat linux | = 9.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 2.0 | No fix listed |
| suse linux | = 3.0 | No fix listed |
| suse linux | = 4.0 | No fix listed |
| suse linux | = 4.2 | No fix listed |
| suse linux | = 4.3 | No fix listed |
| suse linux | = 4.4 | No fix listed |
| suse linux | = 4.4.1 | No fix listed |
| suse linux | = 5.0 | No fix listed |
| suse linux | = 5.1 | No fix listed |
| suse linux | = 5.2 | No fix listed |
| suse linux | = 5.3 | No fix listed |
| suse linux | = 6.0 | No fix listed |
| suse linux | = 6.1 | No fix listed |
| suse linux | = 6.1-alpha | No fix listed |
| suse linux | = 6.2 | No fix listed |
| suse linux | = 6.3 | No fix listed |
| suse linux | = 6.3-alpha | No fix listed |
| suse linux | = 6.4 | No fix listed |
| suse linux | = 6.4-alpha | No fix listed |
| suse linux | = 7.0 | No fix listed |
| suse linux | = 7.0-alpha | No fix listed |
| suse linux | = 7.1 | No fix listed |
| suse linux | = 7.1-alpha | No fix listed |
| suse linux | = 7.2 | No fix listed |
| suse linux | = 7.3 | No fix listed |
| suse linux | = 8.0 | No fix listed |
| suse linux | = 8.1 | No fix listed |
| suse linux | = 8.2 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
| debian/cups(Debian:12) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:13) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:14) | < 1.1.22-7 | 1.1.22-7 |
References
- MDKSA-2005:041 vendor-advisory
- MDKSA-2005:042 vendor-advisory
- MDKSA-2005:043 vendor-advisory
- MDKSA-2005:044 vendor-advisory
- MDKSA-2005:052 vendor-advisory
- MDKSA-2005:056 vendor-advisory
- RHSA-2005:034 vendor-advisory
- RHSA-2005:053 vendor-advisory
- RHSA-2005:057 vendor-advisory
- RHSA-2005:132 vendor-advisory
- RHSA-2005:213 patch vendor-advisory
- 11501 patch vdb-entry vendor-advisory
- xpdf-pdf-bo(17818) vdb-entry
- oval:org.mitre.oval:def:11107 signature vdb-entry
- Debian Security Tracker CVE-2005-0206 vendor-advisory