Your submission was sent successfully! Close

Thank you for contacting us. A member of our team will be in touch shortly. Close

You have successfully unsubscribed! Close

Thank you for signing up for our newsletter!
In these regular emails you will find the latest updates about Ubuntu and upcoming events where you can meet our team.Close

CVE-2006-1244

Publication date 15 March 2006

Last updated 24 July 2024


Ubuntu priority

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

Status

Package Ubuntu Release Status
cupsys 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
gpdf 7.04 feisty Not in release
6.10 edgy
Fixed 2.10.0-4
6.06 LTS dapper Ignored end of life, was needed
kdegraphics 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
koffice 7.04 feisty
Fixed 1.6.2-0ubuntu1.1
6.10 edgy
Fixed 1.5.2-0ubuntu2.2
6.06 LTS dapper
Fixed 1.5.0-0ubuntu9.2
poppler 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected
tetex-bin 7.04 feisty
Not affected
6.10 edgy
Not affected
6.06 LTS dapper
Not affected

References

Related Ubuntu Security Notices (USN)

    • USN-270-1
    • xpdf vulnerabilities
    • 13 April 2006

Other references