CVE:CVE-2005-0206
CNNVD:CNNVD-200504-121
Xpdf是开放源代码查看PDF文件程序。
Xpdf 2.0和3.0的整形溢出的补丁与一些64位的LINUX发布版不兼容(如Red hat)，这可能导致Xpdf的用户存整形溢出漏洞。
solution:Upgrade ascii ptex to a higher version than 3.1.4,and avoid the version 3.1.4; Upgrade cstex cstetex to a higher version than 2.0.2,and avoid the version 2.0.2; Upgrade easy_software_products cups to a higher version than 1.0.4,1.0.4_8,1.1.1,1.1.4,1.1.4_2,1.1.4_3,1.1.4_5,1.1.6,1.1.7,1.1.10,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.1.19_rc5,1.1.20,and avoid the version 1.0.4,1.0.4_8,1.1.1,1.1.4,1.1.4_2,1.1.4_3,1.1.4_5,1.1.6,1.1.7,1.1.10,1.1.12,1.1.13,1.1.14,1.1.15,1.1.16,1.1.17,1.1.18,1.1.19,1.1.19_rc5,1.1.20; Upgrade gnome gpdf to a higher version than 0.110,0.112,0.131,and avoid the version 0.110,0.112,0.131; Upgrade kde koffice to a higher version than 1.3,1.3.1,1.3.2,1.3.3,1.3_beta1,1.3_beta2,1.3_beta3,and avoid the version 1.3,1.3.1,1.3.2,1.3.3,1.3_beta1,1.3_beta2,1.3_beta3; Upgrade kde kpdf to a higher version than 3.2,and avoid the version 3.2; Upgrade pdftohtml pdftohtml to a higher version than 0.32a,0.32b,0.33,0.33a,0.34,0.35,0.36,and avoid the version 0.32a,0.32b,0.33,0.33a,0.34,0.35,0.36; Upgrade sgi propack to a higher version than 3.0,and avoid the version 3.0; Upgrade tetex tetex to a higher version than 1.0.6,1.0.7,2.0,2.0.1,2.0.2,and avoid the version 1.0.6,1.0.7,2.0,2.0.1,2.0.2; Upgrade xpdf xpdf to a higher version than 0.90,0.91,0.92,0.93,1.0,1.0a,1.1,2.0,2.1,2.3,3.0,and avoid the version 0.90,0.91,0.92,0.93,1.0,1.0a,1.1,2.0,2.1,2.3,3.0; Upgrade sgi advanced_linux_environment to a higher version than 3.0,and avoid the version 3.0; Upgrade debian debian_linux to a higher version than 3.0,and avoid the version 3.0; Upgrade gentoo linux to a higher version than *; Upgrade kde kde to a higher version than 3.2,3.2.1,3.2.2,3.2.3,3.3,3.3.1,and avoid the version 3.2,3.2.1,3.2.2,3.2.3,3.3,3.3.1; Upgrade mandrakesoft mandrake_linux_corporate_server to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux to a higher version than 2.1,3.0,and avoid the version 2.1,3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat fedora_core to a higher version than core_1.0,core_2.0,core_3.0,and avoid the version core_1.0,core_2.0,core_3.0; Upgrade redhat linux to a higher version than 9.0,and avoid the version 9.0; Upgrade redhat linux_advanced_workstation to a higher version than 2.1,and avoid the version 2.1; Upgrade suse suse_linux to a higher version than 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2,and avoid the version 1.0,2.0,3.0,4.0,4.2,4.3,4.4,4.4.1,5.0,5.1,5.2,5.3,6.0,6.1,6.1:alpha,6.2,6.3,6.3:alpha,6.4,6.4:alpha,7.0,7.0:alpha,7.1,7.1:alpha,7.2,7.3,8.0,8.1,8.2,9.0,9.1,9.2; Upgrade ubuntu ubuntu_linux to a higher version than 4.1,and avoid the version 4.1