Lucene search
HistoryApr 27, 2005 - 4:00 a.m.
CVE-2005-0206
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.07
Percentile
94.0%
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Affected configurations
Node
asciiptexMatch3.1.4
ORcstexcstetexMatch2.0.2
OReasy_software_productscupsMatch1.0.4
OReasy_software_productscupsMatch1.0.4_8
OReasy_software_productscupsMatch1.1.1
OReasy_software_productscupsMatch1.1.4
OReasy_software_productscupsMatch1.1.4_2
OReasy_software_productscupsMatch1.1.4_3
OReasy_software_productscupsMatch1.1.4_5
OReasy_software_productscupsMatch1.1.6
OReasy_software_productscupsMatch1.1.7
OReasy_software_productscupsMatch1.1.10
OReasy_software_productscupsMatch1.1.12
OReasy_software_productscupsMatch1.1.13
OReasy_software_productscupsMatch1.1.14
OReasy_software_productscupsMatch1.1.15
OReasy_software_productscupsMatch1.1.16
OReasy_software_productscupsMatch1.1.17
OReasy_software_productscupsMatch1.1.18
OReasy_software_productscupsMatch1.1.19
OReasy_software_productscupsMatch1.1.19_rc5
OReasy_software_productscupsMatch1.1.20
ORgnomegpdfMatch0.110
ORgnomegpdfMatch0.112
ORgnomegpdfMatch0.131
ORkdekofficeMatch1.3
ORkdekofficeMatch1.3.1
ORkdekofficeMatch1.3.2
ORkdekofficeMatch1.3.3
ORkdekofficeMatch1.3_beta1
ORkdekofficeMatch1.3_beta2
ORkdekofficeMatch1.3_beta3
ORkdekpdfMatch3.2
ORpdftohtmlpdftohtmlMatch0.32a
ORpdftohtmlpdftohtmlMatch0.32b
ORpdftohtmlpdftohtmlMatch0.33
ORpdftohtmlpdftohtmlMatch0.33a
ORpdftohtmlpdftohtmlMatch0.34
ORpdftohtmlpdftohtmlMatch0.35
ORpdftohtmlpdftohtmlMatch0.36
ORsgipropackMatch3.0
ORtetextetexMatch1.0.6
ORtetextetexMatch1.0.7
ORtetextetexMatch2.0
ORtetextetexMatch2.0.1
ORtetextetexMatch2.0.2
ORxpdfxpdfMatch0.90
ORxpdfxpdfMatch0.91
ORxpdfxpdfMatch0.92
ORxpdfxpdfMatch0.93
ORxpdfxpdfMatch1.0
ORxpdfxpdfMatch1.0a
ORxpdfxpdfMatch1.1
ORxpdfxpdfMatch2.0
ORxpdfxpdfMatch2.1
ORxpdfxpdfMatch2.3
ORxpdfxpdfMatch3.0
ORsgiadvanced_linux_environmentMatch3.0
Node
debiandebian_linuxMatch3.0
ORdebiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
ORgentoolinux
ORkdekdeMatch3.2
ORkdekdeMatch3.2.1
ORkdekdeMatch3.2.2
ORkdekdeMatch3.2.3
ORkdekdeMatch3.3
ORkdekdeMatch3.3.1
ORmandrakesoftmandrake_linux_corporate_serverMatch3.0
ORmandrakesoftmandrake_linux_corporate_serverMatch3.0x86_64
ORredhatenterprise_linuxMatch2.1advanced_server
ORredhatenterprise_linuxMatch2.1advanced_server_ia64
ORredhatenterprise_linuxMatch2.1enterprise_server
ORredhatenterprise_linuxMatch2.1enterprise_server_ia64
ORredhatenterprise_linuxMatch2.1workstation
ORredhatenterprise_linuxMatch2.1workstation_ia64
ORredhatenterprise_linuxMatch3.0advanced_servers
ORredhatenterprise_linuxMatch3.0enterprise_server
ORredhatenterprise_linuxMatch3.0workstation
ORredhatenterprise_linux_desktopMatch3.0
ORredhatfedora_coreMatchcore_1.0
ORredhatfedora_coreMatchcore_2.0
ORredhatfedora_coreMatchcore_3.0
ORredhatlinuxMatch9.0i386
ORredhatlinux_advanced_workstationMatch2.1ia64
ORredhatlinux_advanced_workstationMatch2.1itanium_processor
ORsusesuse_linuxMatch1.0
ORsusesuse_linuxMatch2.0
ORsusesuse_linuxMatch3.0
ORsusesuse_linuxMatch4.0
ORsusesuse_linuxMatch4.2
ORsusesuse_linuxMatch4.3
ORsusesuse_linuxMatch4.4
ORsusesuse_linuxMatch4.4.1
ORsusesuse_linuxMatch5.0
ORsusesuse_linuxMatch5.1
ORsusesuse_linuxMatch5.2
ORsusesuse_linuxMatch5.3
ORsusesuse_linuxMatch6.0
ORsusesuse_linuxMatch6.1
ORsusesuse_linuxMatch6.1alpha
ORsusesuse_linuxMatch6.2
ORsusesuse_linuxMatch6.3
ORsusesuse_linuxMatch6.3ppc
ORsusesuse_linuxMatch6.3alpha
ORsusesuse_linuxMatch6.4
ORsusesuse_linuxMatch6.4i386
ORsusesuse_linuxMatch6.4ppc
ORsusesuse_linuxMatch6.4alpha
ORsusesuse_linuxMatch7.0
ORsusesuse_linuxMatch7.0i386
ORsusesuse_linuxMatch7.0ppc
ORsusesuse_linuxMatch7.0sparc
ORsusesuse_linuxMatch7.0alpha
ORsusesuse_linuxMatch7.1
ORsusesuse_linuxMatch7.1spa
ORsusesuse_linuxMatch7.1sparc
ORsusesuse_linuxMatch7.1x86
ORsusesuse_linuxMatch7.1alpha
ORsusesuse_linuxMatch7.2
ORsusesuse_linuxMatch7.2i386
ORsusesuse_linuxMatch7.3
ORsusesuse_linuxMatch7.3i386
ORsusesuse_linuxMatch7.3ppc
ORsusesuse_linuxMatch7.3sparc
ORsusesuse_linuxMatch8.0
ORsusesuse_linuxMatch8.0i386
ORsusesuse_linuxMatch8.1
ORsusesuse_linuxMatch8.2
ORsusesuse_linuxMatch9.0
ORsusesuse_linuxMatch9.0x86_64
ORsusesuse_linuxMatch9.1
ORsusesuse_linuxMatch9.1x86_64
ORsusesuse_linuxMatch9.2
ORsusesuse_linuxMatch9.2x86_64
ORubuntuubuntu_linuxMatch4.1ia64
ORubuntuubuntu_linuxMatch4.1ppc
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ascii | ptex | 3.1.4 | cpe:2.3:a:ascii:ptex:3.1.4:*:*:*:*:*:*:* |
| cstex | cstetex | 2.0.2 | cpe:2.3:a:cstex:cstetex:2.0.2:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.0.4 | cpe:2.3:a:easy_software_products:cups:1.0.4:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.0.4_8 | cpe:2.3:a:easy_software_products:cups:1.0.4_8:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.1 | cpe:2.3:a:easy_software_products:cups:1.1.1:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.4 | cpe:2.3:a:easy_software_products:cups:1.1.4:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.4_2 | cpe:2.3:a:easy_software_products:cups:1.1.4_2:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.4_3 | cpe:2.3:a:easy_software_products:cups:1.1.4_3:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.4_5 | cpe:2.3:a:easy_software_products:cups:1.1.4_5:*:*:*:*:*:*:* |
| easy_software_products | cups | 1.1.6 | cpe:2.3:a:easy_software_products:cups:1.1.6:*:*:*:*:*:*:* |
References
www.mandriva.com/security/advisories?name=MDKSA-2005:041
www.mandriva.com/security/advisories?name=MDKSA-2005:042
www.mandriva.com/security/advisories?name=MDKSA-2005:043
www.mandriva.com/security/advisories?name=MDKSA-2005:044
www.mandriva.com/security/advisories?name=MDKSA-2005:052
www.mandriva.com/security/advisories?name=MDKSA-2005:056
www.redhat.com/support/errata/RHSA-2005-034.html
www.redhat.com/support/errata/RHSA-2005-053.html
www.redhat.com/support/errata/RHSA-2005-057.html
www.redhat.com/support/errata/RHSA-2005-132.html
www.redhat.com/support/errata/RHSA-2005-213.html
www.securityfocus.com/bid/11501
exchange.xforce.ibmcloud.com/vulnerabilities/17818
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107
Related
nessus
nessus
RHEL 2.1 / 3 : xpdf (RHSA-2005:213)
2005-03-04 00:00:00
RHEL 3 : cups (RHSA-2005:132)
2005-02-18 00:00:00
Mandrake Linux Security Advisory : gpdf (MDKSA-2005:042)
2012-09-06 00:00:00
redhat
redhat
(RHSA-2005:213) xpdf security update
2005-03-04 00:00:00
(RHSA-2005:132) cups security update
2005-02-18 00:00:00
(RHSA-2005:057) gpdf security update
2005-02-15 00:00:00
debiancve
debiancve
cvelist
cvelist
ubuntucve
ubuntucve
cve
cve
debian
debian
[SECURITY] [DSA 573-1] New cupsys packages fix arbitrary code execution
2004-10-21 14:18:22
[SECURITY] [DSA 581-1] New xpdf packages fix arbitrary code execution
2004-11-02 15:35:44
[SECURITY] [DSA 599-1] New tetex-bin packages fix arbitrary code execution
2004-11-25 14:48:24
openvas
openvas
Debian Security Advisory DSA 573-1 (cupsys)
2008-01-17 00:00:00
Debian Security Advisory DSA 599-1 (tetex-bin)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-581-1)
2008-01-17 00:00:00
gentoo
gentoo
pdftohtml: Vulnerabilities in included Xpdf
2004-11-23 00:00:00
Xpdf, CUPS: Multiple integer overflows
2004-10-21 00:00:00
GPdf, KPDF, KOffice: Vulnerabilities in included xpdf
2004-10-28 00:00:00
osv
osv
xpdf - integer overflows
2004-11-02 00:00:00
tetex-bin - integer overflows
2004-11-25 00:00:00
cupsys - integer overflows
2004-10-21 00:00:00
securityvulns
securityvulns
MDKSA-2004:114 - Updated gpdf packages fix DoS vulnerability
2004-10-22 00:00:00
MDKSA-2004:116 - Updated cups packages fix DoS vulnerabilities
2004-10-22 00:00:00
[KDE security advisory] Multiple integer overflows in kpdf
2004-10-22 00:00:00
ubuntu
ubuntu
tetex-bin vulnerabilities
2004-10-28 00:00:00
xpdf vulnerabilities
2004-11-02 00:00:00
prion
prion
Integer overflow
2008-04-04 00:44:00
freebsd
freebsd
xpdf -- integer overflow vulnerabilities
2004-10-21 00:00:00
nvd
nvd
centos
centos
cups security update
2008-04-01 17:06:38
tetex security update
2005-04-01 21:29:55
suse
suse
remote system compromise in xpdf, gpdf, kdegraphics3-pdf, pdftohtml, cups
2004-10-26 10:45:14
local privilege escalation in libtiff
2004-10-22 14:52:41
potential remote buffer overflow in samba
2004-11-15 22:07:05
oraclelinux
oraclelinux
kdegraphics security update
2006-11-30 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
6.9
Confidence
Low
EPSS
0.07
Percentile
94.0%
Related for NVD:CVE-2005-0206