CVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which…

Description

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Exploitation

Is it being used?

Exploit prediction (EPSS)3.0% · higher than 87% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AL

Advanced Linux Environment · Sgi

3.0 · source: NVD

CS

Cstetex · Cstex

2.0.2 · source: NVD

CU

Cups · Easy Software Products

1.0.4; 1.0.4_8; 1.1.1; 1.1.4; 1.1.4_2; 1.1.4_3; +14 more · source: NVD

DL

Debian Linux · Debian

3.0; 3.0; 3.0; 3.0; 3.0; 3.0; +6 more · source: NVD

EL

Enterprise Linux · Redhat

2.1; 2.1; 2.1; 2.1; 2.1; 2.1; +3 more · source: NVD

EL

Enterprise Linux Desktop · Redhat

3.0 · source: NVD

FC

Fedora Core · Redhat

core_1.0; core_2.0; core_3.0 · source: NVD

GP

Gpdf · Gnome

0.110; 0.112; 0.131 · source: NVD

KD

Kde · Kde

3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1 · source: NVD

KO

Koffice · Kde

1.3; 1.3.1; 1.3.2; 1.3.3; 1.3_beta1; 1.3_beta2; +1 more · source: NVD

KP

Kpdf · Kde

3.2 · source: NVD

LI

Linux · Redhat

9.0 · source: NVD