CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
- EPSS
- 3.0% chance of exploitation in the next 30 days; higher than 87% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- ascii:ptex
- cstex:cstetex
- debian:debian_linux
- easy_software_products:cups
- gentoo:linux
- gnome:gpdf
- kde:kde
- kde:koffice
- kde:kpdf
- mandrakesoft:mandrake_linux_corporate_server
- pdftohtml:pdftohtml
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation
- sgi:advanced_linux_environment
- sgi:propack
- suse:suse_linux
- tetex:tetex
- ubuntu:ubuntu_linux
- xpdf:xpdf
References
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:041
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:042
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:043
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:044
- http://www.mandriva.com/security/advisories?name=MDKSA-2005:052