CVE-2005-0206

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-04-27 · updated 2026-06-16

Description

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Affected products

Ascii Ptex: 3.1.4
Cstex Cstetex: 2.0.2
Debian Linux: 3.0
Easy Software Products Cups: 1.0.4, 1.0.4_8, 1.1.1, 1.1.4, 1.1.4_2, 1.1.4_3 (+14)
gentoo Linux: all versions
GNOME Gpdf: 0.110, 0.112, 0.131
Kde: 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1
KDE Koffice: 1.3, 1.3.1, 1.3.2, 1.3.3, 1.3_beta1, 1.3_beta2 (+1)
KDE Kpdf: 3.2
Mandrakesoft Mandrake Linux Corporate Server: 3.0
Pdftohtml: 0.32a, 0.32b, 0.33, 0.33a, 0.34, 0.35 (+1)
Red Hat Enterprise Linux: 2.1, 3.0
RedHat Enterprise Linux Desktop: 3.0
RedHat Fedora Core: core_1.0, core_2.0, core_3.0
RedHat Linux: 9.0
RedHat Linux Advanced Workstation: 2.1
Sgi Advanced Linux Environment: 3.0
Sgi Propack: 3.0
Suse Linux: 1.0, 2.0, 3.0, 4.0, 4.2, 4.3 (+26)
Tetex: 1.0.6, 1.0.7, 2.0, 2.0.1, 2.0.2
Ubuntu Linux: 4.1
Xpdf: 0.90, 0.91, 0.92, 0.93, 1.0, 1.0a (+5)

References

Get alerted when CVE-2005-0206 or the next vulnerability affects your stack