NetSight
IP …
high7.5

CVE-2005-0206

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such a…

Impact

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Affected products

VendorProductAffected versions
AsciiPtex
Version 3.1.4
CstexCstetex
Version 2.0.2
Easy Software ProductsCups
Versions 1.0.4, 1.0.4_8, 1.1.1, 1.1.4, 1.1.4_2, 1.1.4_3
GnomeGpdf
Versions 0.110, 0.112, 0.131
KdeKoffice
Versions 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3_beta1, 1.3_beta2
KdeKpdf
Version 3.2
PdftohtmlPdftohtml
Versions 0.32a, 0.32b, 0.33, 0.33a, 0.34, 0.35
SgiPropack
Version 3.0
TetexTetex
Versions 1.0.6, 1.0.7, 2.0, 2.0.1, 2.0.2
XpdfXpdf
Versions 0.90, 0.91, 0.92, 0.93, 1.0, 1.0a
SgiAdvanced Linux Environment
Version 3.0
DebianDebian Linux
Version 3.0

References