CVE-2005-0206
published 2005-04-27CVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such…
PriorityP425high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.99%
85.8th percentile
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Affected
108 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| apple | cups | >= 0 < 1.1.22-7 | 1.1.22-7 |
| apple | cups | >= 0 < 1.1.22-7 | 1.1.22-7 |
| apple | cups | >= 0 < 1.1.22-7 | 1.1.22-7 |
| apple | cups | >= 0 < 1.1.22-7 | 1.1.22-7 |
| ascii | ptex | — | — |
| cstex | cstetex | — | — |
| debian | cups | < cups 1.1.22-7 (bookworm) | cups 1.1.22-7 (bookworm) |
| debian | debian_linux | — | — |
| debian | xpdf | < cups 1.1.22-7 (bookworm) | cups 1.1.22-7 (bookworm) |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
| easy_software_products | cups | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv10.0CRITICAL
vendor_debian10.0CRITICAL
vendor_redhat10.0CRITICAL
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jp38-q8w6-3xm3: The patch for integer overflow vulnerabilities in Xpdf 2
ghsa_unreviewed·2022-05-01·CVSS 10.0
CVE-2005-0206 [CRITICAL] GHSA-jp38-q8w6-3xm3: The patch for integer overflow vulnerabilities in Xpdf 2
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
OSV
CVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2
osv·2005-04-27·CVSS 10.0
CVE-2005-0206 [CRITICAL] CVE-2005-0206: The patch for integer overflow vulnerabilities in Xpdf 2
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Red Hat
cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
vendor_redhat·2008-04-01·CVSS 10.0
CVE-2008-1374 [CRITICAL] cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
Integer overflow in pdftops filter in CUPS in Red Hat Enterprise Linux 3 and 4, when running on 64-bit platforms, allows remote attackers to execute arbitrary code via a crafted PDF file. NOTE: this issue is due to an incomplete fix for CVE-2004-0888.
Debian
CVE-2005-0206: cups - The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-088...
vendor_debian·2005·CVSS 10.0
CVE-2005-0206 [CRITICAL] CVE-2005-0206: cups - The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-088...
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Scope: local
bookworm: resolved (fixed in 1.1.22-7)
bullseye: resolved (fixed in 1.1.22-7)
forky: resolved (fixed in 1.1.22-7)
sid: resolved (fixed in 1.1.22-7)
trixie: resolved (fixed in 1.1.22-7)
Red Hat
security flaw
vendor_redhat·2004-10-20·CVSS 10.0
CVE-2005-0206 [CRITICAL] security flaw
security flaw
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2005-0206 security flaw
bugzilla·2018-08-16·CVSS 10.0
CVE-2005-0206 [CRITICAL] CVE-2005-0206 security flaw
CVE-2005-0206 security flaw
Flaw bug created to hold information about an old flaw we knew something about. For more details see the MITRE CVE description.
Discussion:
MITRE description:
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Bugzilla
CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
bugzilla·2008-03-20·CVSS 10.0
CVE-2008-1374 [CRITICAL] CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
CVE-2008-1374 cups: incomplete fix for CVE-2004-0888 / CVE-2005-0206
It was discovered that patch applied to cups packages as shipped in Red Hat
Enterprise Linux 3 and 4 to address security issues in xpdf code known as
CVE-2004-0888 / CVE-2005-0206 was incomplete.
On certain platforms, malicious pdf file could still cause a crash or possibly
cause code execution when it's processed by pdftops filter.
This issue affects 64-bit platforms. cups packages in Red Hat Enterprise Linux
5 are not affected by this problem.
Discussion:
This issue was addressed in:
Red Hat Enterprise Linux:
http://rhn.redhat.com/errata/RHSA-2008-0206.html
Bugzilla
CAN-2004-0888 xpdf issues affect cups (CAN-2005-0206)
bugzilla·2005-02-08
[MEDIUM] CAN-2004-0888 xpdf issues affect cups (CAN-2005-0206)
CAN-2004-0888 xpdf issues affect cups (CAN-2005-0206)
*** This bug has been split off bug 135378 ***
This issue affects RHEL4 as well.
------- Original comment by Mark J. Cox (Security Response Team) on 2004.10.12
07:50 -------
CUPS contains a stripped down version of xpdf. Recent issues have
been found in xpdf 2 that can result in integer overflows causing bad
memory allocation or out of bounds writes. It's not expected these
can cause arbitrary code execution, more likely to be DoS crashers.
Embargoed until October 20th 1400UTC
Patch to follow
CVE names to follow
Discussion:
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to
http://www.mandriva.com/security/advisories?name=MDKSA-2005:041http://www.mandriva.com/security/advisories?name=MDKSA-2005:042http://www.mandriva.com/security/advisories?name=MDKSA-2005:043http://www.mandriva.com/security/advisories?name=MDKSA-2005:044http://www.mandriva.com/security/advisories?name=MDKSA-2005:052http://www.mandriva.com/security/advisories?name=MDKSA-2005:056http://www.redhat.com/support/errata/RHSA-2005-034.htmlhttp://www.redhat.com/support/errata/RHSA-2005-053.htmlhttp://www.redhat.com/support/errata/RHSA-2005-057.htmlhttp://www.redhat.com/support/errata/RHSA-2005-132.htmlhttp://www.redhat.com/support/errata/RHSA-2005-213.htmlhttp://www.securityfocus.com/bid/11501https://exchange.xforce.ibmcloud.com/vulnerabilities/17818https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107http://www.mandriva.com/security/advisories?name=MDKSA-2005:041http://www.mandriva.com/security/advisories?name=MDKSA-2005:042http://www.mandriva.com/security/advisories?name=MDKSA-2005:043http://www.mandriva.com/security/advisories?name=MDKSA-2005:044http://www.mandriva.com/security/advisories?name=MDKSA-2005:052http://www.mandriva.com/security/advisories?name=MDKSA-2005:056http://www.redhat.com/support/errata/RHSA-2005-034.htmlhttp://www.redhat.com/support/errata/RHSA-2005-053.htmlhttp://www.redhat.com/support/errata/RHSA-2005-057.htmlhttp://www.redhat.com/support/errata/RHSA-2005-132.htmlhttp://www.redhat.com/support/errata/RHSA-2005-213.htmlhttp://www.securityfocus.com/bid/11501https://exchange.xforce.ibmcloud.com/vulnerabilities/17818https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107
2005-04-27
Published