ANCHORE-2005-0206

ANCHORE-2005-0206 PUBLISHED

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Affected Products

Vendor	Product	Versions
tetex	tetex	2.0, 2.0, 1.0.7
kde	kde	3.3.1, 3.2, 3.3.1
sgi	propack	3.0, 3.0, 3.0
ascii	ptex	3.1.4, 3.1.4, 3.1.4
redhat	linux	9.0, 9.0, 9.0
kde	kpdf	3.2, 3.2, 3.2
redhat	fedora_core	core_2.0, core_1.0, *
redhat	enterprise_linux_desktop	3.0, 3.0, 3.0
mandrakesoft	mandrake_linux_corporate_server	3.0, 3.0, 3.0
redhat	enterprise_linux	3.0, 3.0, 2.1
sgi	advanced_linux_environment	3.0, 3.0, 3.0
pdftohtml	pdftohtml	0.36, 0.35, 0.33a
suse	suse_linux	2.0, 1.0, 2.0
gnome	gpdf	0.110, 0.131, 0.112
debian	debian_linux	3.0, 3.0, 3.0
cstex	cstetex	2.0.2, 2.0.2, 2.0.2
xpdf	xpdf	*, 1.0, 0.92
easy_software_products	cups	1.1.16, ,
ubuntu	ubuntu_linux	4.1, 4.1, 4.1
redhat	linux_advanced_workstation	2.1, 2.1, 2.1

…and 1 more

Timeline

Feb 15, 2005 CVE Published
Aug 7, 2024 CVE Updated

References

Open in Interactive Console →