high
7.6
CWE
NVD-CWE-Other
Advisory Published
Updated

CVE-2006-1244

First published: Wed Mar 15 2006(Updated: )

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Xpdf=2.0
libextractor=0.3.11
Xpdf=3.0_pl3
Xpdf=1.0
libextractor=0.4.1
libextractor=0.4.2
Xpdf=3.0.1_pl1
Xpdf=0.91
libextractor=0.4
libextractor=0.3.8
Xpdf=2.3
Xpdf=0.92
Xpdf=3.0.1
GNOME GPDF=2.8.2
Xpdf=1.0a
libextractor=0.3.9
Xpdf=2.2
Xpdf=3.0_pl2
Xpdf=2.1
Xpdf=0.90
Xpdf=3.0
libextractor=0.5
Xpdf=0.93
libextractor=0.3.7
libextractor=0.3.6
Xpdf=1.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1
Debian=3.1

Remedy

http://secunia.com/advisories/18948

Remedy

http://secunia.com/advisories/19021

Remedy

http://secunia.com/advisories/19065

Remedy

http://secunia.com/advisories/19091

Remedy

http://secunia.com/advisories/19164

Remedy

http://secunia.com/advisories/19364

Remedy

http://secunia.com/advisories/19644

Remedy

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz

Remedy

http://www.debian.org/security/2006/dsa-1019

Remedy

http://www.debian.org/security/2006/dsa-979

Remedy

http://www.debian.org/security/2006/dsa-982

Remedy

http://www.debian.org/security/2006/dsa-983

Remedy

http://www.debian.org/security/2006/dsa-984

Remedy

http://www.debian.org/security/2006/dsa-998

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2006-1244?

    The severity of CVE-2006-1244 is currently unknown due to unspecified impact and user-assisted attack vectors.

  • How do I fix CVE-2006-1244?

    To fix CVE-2006-1244, update the affected software to the latest versions that do not contain the vulnerability.

  • Which software versions are affected by CVE-2006-1244?

    CVE-2006-1244 affects multiple versions of Xpdf and libextractor, specifically versions after 3.00 and various earlier versions listed in the document.

  • Can CVE-2006-1244 be exploited remotely?

    CVE-2006-1244 may involve user-assisted attack vectors, indicating that while direct remote exploitation is unlikely, the user must engage with malicious content.

  • What products utilize the vulnerable Xpdf and libextractor versions mentioned in CVE-2006-1244?

    Products like pdfkit.framework, gpdf, pdftohtml, and others utilize vulnerable versions of Xpdf and libextractor.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203