CVE-2005-0206 Integer overflow in n/a
Incomplete patch for integer overflow in Xpdf on 64-bit Linux allows attackers to execute code or cause denial of service via malicious PDFs.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2005-0206?
CVE-2005-0206 is a high-severity vulnerability in Debian Debian Linux, published on 15 Feb 2005. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Which versions are affected by CVE-2005-0206?
It affects 22 products.
Linux distribution packages (24)
cups Red Hat:enterprise_linux:3::as | All versions | 1:1.1.17-13.3.27 |
cups-debuginfo Red Hat:enterprise_linux:3::as | All versions | 1:1.1.17-13.3.27 |
cups-devel Red Hat:enterprise_linux:3::as | All versions | 1:1.1.17-13.3.27 |
cups-libs Red Hat:enterprise_linux:3::as | All versions | 1:1.1.17-13.3.27 |
xpdf Red Hat:enterprise_linux:3::as | All versions | 1:2.02-9.6 |
xpdf-debuginfo Red Hat:enterprise_linux:3::as | All versions | 1:2.02-9.6 |
cups Red Hat:enterprise_linux:3::desktop | All versions | 1:1.1.17-13.3.27 |
cups-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 1:1.1.17-13.3.27 |
cups-devel Red Hat:enterprise_linux:3::desktop | All versions | 1:1.1.17-13.3.27 |
cups-libs Red Hat:enterprise_linux:3::desktop | All versions | 1:1.1.17-13.3.27 |
xpdf Red Hat:enterprise_linux:3::desktop | All versions | 1:2.02-9.6 |
xpdf-debuginfo Red Hat:enterprise_linux:3::desktop | All versions | 1:2.02-9.6 |
cups Red Hat:enterprise_linux:3::es | All versions | 1:1.1.17-13.3.27 |
cups-debuginfo Red Hat:enterprise_linux:3::es | All versions | 1:1.1.17-13.3.27 |
cups-devel Red Hat:enterprise_linux:3::es | All versions | 1:1.1.17-13.3.27 |
cups-libs Red Hat:enterprise_linux:3::es | All versions | 1:1.1.17-13.3.27 |
xpdf Red Hat:enterprise_linux:3::es | All versions | 1:2.02-9.6 |
xpdf-debuginfo Red Hat:enterprise_linux:3::es | All versions | 1:2.02-9.6 |
cups Red Hat:enterprise_linux:3::ws | All versions | 1:1.1.17-13.3.27 |
cups-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 1:1.1.17-13.3.27 |
cups-devel Red Hat:enterprise_linux:3::ws | All versions | 1:1.1.17-13.3.27 |
cups-libs Red Hat:enterprise_linux:3::ws | All versions | 1:1.1.17-13.3.27 |
xpdf Red Hat:enterprise_linux:3::ws | All versions | 1:2.02-9.6 |
xpdf-debuginfo Red Hat:enterprise_linux:3::ws | All versions | 1:2.02-9.6 |
Products include Ascii Ptex, Cstex Cstetex, Debian Debian Linux, Easy Software Products Cups, Gentoo Linux, Gnome Gpdf and 16 more.
How do I fix CVE-2005-0206?
Apply the vendor's patch.
Is CVE-2005-0206 being exploited?
There is no known exploitation of CVE-2005-0206 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2005-0206, GHSA-jp38-q8w6-3xm3, RHSA-2005:132, RHSA-2005:213.