CVE-2005-0206
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Published:Oct 20, 2004
Last Modified:Apr 16, 2026
EPS:Feb 15, 2005
EPSS Score:0.06529
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Ascii
Product
Ptex
Ascii
Ptex
Vendor
Cstex
Product
Cstetex
Cstex
Cstetex
Vendor
Debian
Product
Debian Linux
Debian
Debian Linux
Vendor
Easy Software Products
Product
Cups
Easy Software Products
Cups
Vendor
Gentoo
Product
Linux
Gentoo
Linux
Vendor
Gnome
Product
Gpdf
Gnome
Gpdf
Vendor
Kde
Product
Kde
Kde
Kde
Vendor
Kde
Product
Koffice
Kde
Koffice
Vendor
Kde
Product
Kpdf
Kde
Kpdf
Vendor
Mandrakesoft
Product
Mandrake Linux Corporate Server
Mandrakesoft
Mandrake Linux Corporate Server
Vendor
Pdftohtml
Product
Pdftohtml
Pdftohtml
Pdftohtml
Vendor
Redhat
Product
Enterprise Linux
Redhat
Enterprise Linux
Vendor
Redhat
Product
Enterprise Linux Desktop
Redhat
Enterprise Linux Desktop
Vendor
Redhat
Product
Fedora Core
Redhat
Fedora Core
Vendor
Redhat
Product
Linux
Redhat
Linux
Vendor
Redhat
Product
Linux Advanced Workstation
Redhat
Linux Advanced Workstation
Vendor
Sgi
Product
Advanced Linux Environment
Sgi
Advanced Linux Environment
Vendor
Sgi
Product
Propack
Sgi
Propack
Vendor
Suse
Product
Suse Linux
Suse
Suse Linux
Vendor
Tetex
Product
Tetex
Tetex
Tetex
Vendor
Ubuntu
Product
Ubuntu Linux
Ubuntu
Ubuntu Linux
Vendor
Xpdf
Product
Xpdf
Xpdf
Xpdf
Exploits
No exploit reference
Common Weakness Enumeration
No CWE recorded yet
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
