CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:H/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
89.3%
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, © pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.
Vendor | Product | Version | CPE |
---|---|---|---|
gnome | gpdf | 2.8.2 | cpe:2.3:a:gnome:gpdf:2.8.2:*:*:*:*:*:*:* |
libextractor | libextractor | 0.3.6 | cpe:2.3:a:libextractor:libextractor:0.3.6:*:*:*:*:*:*:* |
libextractor | libextractor | 0.3.7 | cpe:2.3:a:libextractor:libextractor:0.3.7:*:*:*:*:*:*:* |
libextractor | libextractor | 0.3.8 | cpe:2.3:a:libextractor:libextractor:0.3.8:*:*:*:*:*:*:* |
libextractor | libextractor | 0.3.9 | cpe:2.3:a:libextractor:libextractor:0.3.9:*:*:*:*:*:*:* |
libextractor | libextractor | 0.3.11 | cpe:2.3:a:libextractor:libextractor:0.3.11:*:*:*:*:*:*:* |
libextractor | libextractor | 0.4 | cpe:2.3:a:libextractor:libextractor:0.4:*:*:*:*:*:*:* |
libextractor | libextractor | 0.4.1 | cpe:2.3:a:libextractor:libextractor:0.4.1:*:*:*:*:*:*:* |
libextractor | libextractor | 0.4.2 | cpe:2.3:a:libextractor:libextractor:0.4.2:*:*:*:*:*:*:* |
libextractor | libextractor | 0.5 | cpe:2.3:a:libextractor:libextractor:0.5:*:*:*:*:*:*:* |
secunia.com/advisories/18948
secunia.com/advisories/19021
secunia.com/advisories/19065
secunia.com/advisories/19091
secunia.com/advisories/19164
secunia.com/advisories/19364
secunia.com/advisories/19644
security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz
www.debian.org/security/2006/dsa-1019
www.debian.org/security/2006/dsa-979
www.debian.org/security/2006/dsa-982
www.debian.org/security/2006/dsa-983
www.debian.org/security/2006/dsa-984
www.debian.org/security/2006/dsa-998
www.osvdb.org/23834
www.securityfocus.com/bid/16748
usn.ubuntu.com/270-1/