CVE-2006-0301
Fixed in a distro release EPSS 5%
Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | libextractor | 0.5.10-1 |
| Debian 12 | poppler | 0.4.5-1 |
| Debian 12 | xpdf | 3.01-6 |
| Debian 13 | libextractor | 0.5.10-1 |
| Debian 13 | poppler | 0.4.5-1 |
| Debian 13 | xpdf | 3.01-6 |
| Debian 14 | libextractor | 0.5.10-1 |
| Debian 14 | poppler | 0.4.5-1 |
| Debian 14 | xpdf | 3.01-6 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge3 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge4 |
| Debian 3.1 | koffice | 1.3.5-4.sarge.3 |
| Debian 3.1 | libextractor | 0.4.2-2sarge3 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge2 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge3 |
| Debian 3.1 | pdftohtml | 0.36-11sarge2 |
| Debian 3.1 | xpdf | 3.00-13.6 |
| Debian 3.1 | xpdf | 3.00-13.5 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.7 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.7 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.7 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.12 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.12 |
| openSUSE Tumbleweed | poppler | 21.08.0-1.3 |