CVE-2005-0206: Integer Overflow
Published Feb 15, 2005
·Updated
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Affected Software
146 affected components
Pdftohtml Pdftohtml=0.32a
Easy Software Products Cups=1.1.19_rc5
xpdf Xpdf=2.0
Easy Software Products Cups=1.1.10
Easy Software Products Cups=1.1.16
xpdf Xpdf=1.0
KDE Koffice=1.3_beta2
SGI ProPack=3.0
Easy Software Products Cups=1.1.7
Pdftohtml Pdftohtml=0.35
xpdf Xpdf=0.91
Easy Software Products Cups=1.0.4_8
Gnome Gpdf=0.112
KDE Koffice=1.3.3
Pdftohtml Pdftohtml=0.32b
Easy Software Products Cups=1.1.15
KDE Koffice=1.3_beta3
Gnome Gpdf=0.110
Easy Software Products Cups=1.1.13
Pdftohtml Pdftohtml=0.33a
xpdf Xpdf=2.3
KDE Koffice=1.3
teTeX teTeX=1.0.7
xpdf Xpdf=0.92
Pdftohtml Pdftohtml=0.36
xpdf Xpdf=1.0a
Easy Software Products Cups=1.1.17
Ascii Ptex=3.1.4
Gnome Gpdf=0.131
Easy Software Products Cups=1.1.4_3
Easy Software Products Cups=1.1.4
Pdftohtml Pdftohtml=0.34
teTeX teTeX=1.0.6
KDE Koffice=1.3_beta1
Easy Software Products Cups=1.1.12
Cstex Cstetex=2.0.2
xpdf Xpdf=2.1
xpdf Xpdf=0.90
xpdf Xpdf=3.0
Easy Software Products Cups=1.1.4_5
SGI Advanced Linux Environment=3.0
teTeX teTeX=2.0.2
Easy Software Products Cups=1.1.1
Easy Software Products Cups=1.1.20
xpdf Xpdf=0.93
Easy Software Products Cups=1.1.18
teTeX teTeX=2.0.1
Easy Software Products Cups=1.1.19
Easy Software Products Cups=1.0.4
Easy Software Products Cups=1.1.14
KDE Koffice=1.3.1
Easy Software Products Cups=1.1.4_2
KDE kpdf=3.2
Pdftohtml Pdftohtml=0.33
xpdf Xpdf=1.1
KDE Koffice=1.3.2
teTeX teTeX=2.0
Easy Software Products Cups=1.1.6
SUSE SuSE Linux=6.2
SUSE SuSE Linux=6.3
redhat Enterprise Linux=2.1
redhat Fedora Core=core_2.0
SUSE SuSE Linux=4.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=9.2
redhat Enterprise Linux Desktop=3.0
Debian Debian Linux=3.0
SUSE SuSE Linux=9.1
SUSE SuSE Linux=9.0
Ubuntu Ubuntu Linux=4.1
redhat Linux Advanced Workstation=2.1
KDE kde=3.3.1
Debian Debian Linux=3.0
SUSE SuSE Linux=7.1-alpha
SUSE SuSE Linux=8.2
redhat Enterprise Linux=3.0
redhat Enterprise Linux=2.1
Debian Debian Linux=3.0
KDE kde=3.2.2
KDE kde=3.2.1
Debian Debian Linux=3.0
redhat Enterprise Linux=2.1
SUSE SuSE Linux=9.0
redhat Fedora Core=core_1.0
SUSE SuSE Linux=6.3-alpha
Debian Debian Linux=3.0
SUSE SuSE Linux=7.3
SUSE SuSE Linux=5.0
SUSE SuSE Linux=4.4.1
SUSE SuSE Linux=7.2
SUSE SuSE Linux=8.0
Debian Debian Linux=3.0
SUSE SuSE Linux=7.0
SUSE SuSE Linux=5.2
SUSE SuSE Linux=3.0
SUSE SuSE Linux=6.0
Debian Debian Linux=3.0
SUSE SuSE Linux=6.4
SUSE SuSE Linux=7.3
redhat Linux=9.0
Mandrakesoft Mandrake Linux Corporate Server=3.0
SUSE SuSE Linux=7.0
SUSE SuSE Linux=6.1-alpha
SUSE SuSE Linux=7.0
Debian Debian Linux=3.0
SUSE SuSE Linux=1.0
SUSE SuSE Linux=6.1
redhat Linux Advanced Workstation=2.1
SUSE SuSE Linux=8.0
SUSE SuSE Linux=9.1
Mandrakesoft Mandrake Linux Corporate Server=3.0
SUSE SuSE Linux=6.4
redhat Enterprise Linux=3.0
SUSE SuSE Linux=7.0-alpha
SUSE SuSE Linux=4.3
Debian Debian Linux=3.0
SUSE SuSE Linux=4.4
SUSE SuSE Linux=5.1
SUSE SuSE Linux=7.0
redhat Enterprise Linux=2.1
Debian Debian Linux=3.0
SUSE SuSE Linux=7.1
SUSE SuSE Linux=6.3
SUSE SuSE Linux=6.4
KDE kde=3.3
SUSE SuSE Linux=4.2
redhat Enterprise Linux=3.0
SUSE SuSE Linux=7.1
redhat Enterprise Linux=2.1
KDE kde=3.2
SUSE SuSE Linux=6.4-alpha
KDE kde=3.2.3
redhat Fedora Core=core_3.0
SUSE SuSE Linux=7.2
Ubuntu Ubuntu Linux=4.1
SUSE SuSE Linux=2.0
SUSE SuSE Linux=7.3
SUSE SuSE Linux=7.3
SUSE SuSE Linux=9.2
SUSE SuSE Linux=5.3
Gentoo Linux
SUSE SuSE Linux=7.1
Debian Debian Linux=3.0
Debian Debian Linux=3.0
SUSE SuSE Linux=8.1
redhat Enterprise Linux=2.1
Remediation
Patch Available
Patch Available
Event History
Feb 15, 2005
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0206?
CVE-2005-0206 is considered to have moderate severity as it relates to incomplete patching of integer overflow vulnerabilities.
2
How do I fix CVE-2005-0206?
To fix CVE-2005-0206, you should apply the latest security updates for Xpdf and ensure that all relevant patches are fully integrated for your Linux distribution.
3
Which versions of Xpdf are affected by CVE-2005-0206?
Affected versions include Xpdf 1.0, 2.0, and 3.0, particularly on specific 64-bit Linux distributions like Red Hat.
4
What systems are impacted by CVE-2005-0206?
CVE-2005-0206 primarily impacts systems running 64-bit architectures of Xpdf on certain Linux distributions such as Red Hat and SUSE.
5
Is CVE-2005-0206 still relevant today?
While CVE-2005-0206 relates to vulnerabilities discovered years ago, it remains relevant for legacy systems still using affected software versions.