CVE-2006-0301

2006-01-3000:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.02 Low

EPSS

Percentile

88.8%

JSON

Heap-based buffer overflow in Splash.cc in xpdf, as used in other products
such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and
others, allows attackers to cause a denial of service and possibly execute
arbitrary code via crafted splash images that produce certain values that
exceed the width or height of the associated bitmap.

OSVersionArchitecturePackageVersionFilename
ubuntu6.10noarchgpdf< 2.10.0-4UNKNOWN
ubuntu6.06noarchlibextractor< 0.5.14-1UNKNOWN
ubuntu6.10noarchlibextractor< 0.5.14-1UNKNOWN
ubuntu7.04noarchlibextractor< 0.5.14-1UNKNOWN
ubuntu6.06noarchpdftohtml< 0.36-13UNKNOWN
ubuntu6.10noarchpdftohtml< 0.36-13UNKNOWN
ubuntu7.04noarchpdftohtml< 0.36-13UNKNOWN
ubuntu6.06noarchpoppler< 0.5.1-0ubuntu7.2UNKNOWN
ubuntu6.10noarchpoppler< 0.5.4-0ubuntu4.2UNKNOWN
ubuntu7.04noarchpoppler< 0.5.4-0ubuntu8.1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.10	noarch	gpdf	< 2.10.0-4	UNKNOWN
ubuntu	6.06	noarch	libextractor	< 0.5.14-1	UNKNOWN
ubuntu	6.10	noarch	libextractor	< 0.5.14-1	UNKNOWN
ubuntu	7.04	noarch	libextractor	< 0.5.14-1	UNKNOWN
ubuntu	6.06	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	6.10	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	7.04	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	6.06	noarch	poppler	< 0.5.1-0ubuntu7.2	UNKNOWN
ubuntu	6.10	noarch	poppler	< 0.5.4-0ubuntu4.2	UNKNOWN
ubuntu	7.04	noarch	poppler	< 0.5.4-0ubuntu8.1	UNKNOWN