CVE-2006-1244
First published: Wed Mar 15 2006(Updated: )
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Xpdf Xpdf | =2.0 | |
| Libextractor Libextractor | =0.3.11 | |
| Xpdf Xpdf | =3.0_pl3 | |
| Xpdf Xpdf | =1.0 | |
| Libextractor Libextractor | =0.4.1 | |
| Libextractor Libextractor | =0.4.2 | |
| Xpdf Xpdf | =3.0.1_pl1 | |
| Xpdf Xpdf | =0.91 | |
| Libextractor Libextractor | =0.4 | |
| Libextractor Libextractor | =0.3.8 | |
| Xpdf Xpdf | =2.3 | |
| Xpdf Xpdf | =0.92 | |
| Xpdf Xpdf | =3.0.1 | |
| Gnome Gpdf | =2.8.2 | |
| Xpdf Xpdf | =1.0a | |
| Libextractor Libextractor | =0.3.9 | |
| Xpdf Xpdf | =2.2 | |
| Xpdf Xpdf | =3.0_pl2 | |
| Xpdf Xpdf | =2.1 | |
| Xpdf Xpdf | =0.90 | |
| Xpdf Xpdf | =3.0 | |
| Libextractor Libextractor | =0.5 | |
| Xpdf Xpdf | =0.93 | |
| Libextractor Libextractor | =0.3.7 | |
| Libextractor Libextractor | =0.3.6 | |
| Xpdf Xpdf | =1.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 | |
| Debian Debian Linux | =3.1 |
Remedy
http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.debian.org/security/2006/dsa-979
- http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz
- http://www.debian.org/security/2006/dsa-982
- http://www.debian.org/security/2006/dsa-983
- http://www.debian.org/security/2006/dsa-984
- http://www.securityfocus.com/bid/16748
- http://www.osvdb.org/23834
- http://www.debian.org/security/2006/dsa-1019
- http://secunia.com/advisories/19364
- http://secunia.com/advisories/19644
- http://secunia.com/advisories/18948
- http://secunia.com/advisories/19021
- http://secunia.com/advisories/19091
- http://www.debian.org/security/2006/dsa-998
- http://secunia.com/advisories/19065
- http://secunia.com/advisories/19164
- https://usn.ubuntu.com/270-1/
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/references
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/xpdf
- canonical/xpdf xpdf
- version/xpdf xpdf/2.0
- vendor/libextractor
- canonical/libextractor libextractor
- version/libextractor libextractor/0.3.11
- version/xpdf xpdf/3.0_pl3
- version/xpdf xpdf/1.0
- version/libextractor libextractor/0.4.1
- version/libextractor libextractor/0.4.2
- version/xpdf xpdf/3.0.1_pl1
- version/xpdf xpdf/0.91
- version/libextractor libextractor/0.4
- version/libextractor libextractor/0.3.8
- version/xpdf xpdf/2.3
- version/xpdf xpdf/0.92
- version/xpdf xpdf/3.0.1
- vendor/gnome
- canonical/gnome gpdf
- version/gnome gpdf/2.8.2
- version/xpdf xpdf/1.0a
- version/libextractor libextractor/0.3.9
- version/xpdf xpdf/2.2
- version/xpdf xpdf/3.0_pl2
- version/xpdf xpdf/2.1
- version/xpdf xpdf/0.90
- version/xpdf xpdf/3.0
- version/libextractor libextractor/0.5
- version/xpdf xpdf/0.93
- version/libextractor libextractor/0.3.7
- version/libextractor libextractor/0.3.6
- version/xpdf xpdf/1.1
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/3.1