CVE-2005-0206
Fixed in a distro release EPSS 3%
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Products: ascii ptex, cstex cstetex, easy_software_products cups, gnome gpdf, kde koffice, kde kpdf, pdftohtml, sgi propack, tetex, xpdf, sgi advanced_linux_environment, debian_linux, gentoo linux, kde, mandrakesoft mandrake_linux_corporate_server, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux, redhat linux_advanced_workstation, suse_linux, ubuntu_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-7 |
| Debian 13 | cups | 1.1.22-7 |
| Debian 14 | cups | 1.1.22-7 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.27 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.27 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.27 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.27 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.6 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.6 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.6 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-4.3 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-4.3 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.5 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.5 |