CVE-2006-1244 : Detail

CVE-2006-1244

0.74%V3
Network
2006-03-15
18h00 +00:00
2018-10-03
18h57 +00:00
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.

Products Mentioned

Configuraton 0

Gnome>>Gpdf >> Version 2.8.2

    Libextractor>>Libextractor >> Version 0.3.6

      Libextractor>>Libextractor >> Version 0.3.7

        Libextractor>>Libextractor >> Version 0.3.8

          Libextractor>>Libextractor >> Version 0.3.9

            Libextractor>>Libextractor >> Version 0.3.11

              Libextractor>>Libextractor >> Version 0.4

                Libextractor>>Libextractor >> Version 0.4.1

                  Libextractor>>Libextractor >> Version 0.4.2

                    Libextractor>>Libextractor >> Version 0.5

                      Xpdf>>Xpdf >> Version 0.90

                        Xpdf>>Xpdf >> Version 0.91

                          Xpdf>>Xpdf >> Version 0.92

                            Xpdf>>Xpdf >> Version 0.93

                              Xpdf>>Xpdf >> Version 1.0

                                Xpdf>>Xpdf >> Version 1.0a

                                  Xpdf>>Xpdf >> Version 1.1

                                    Xpdf>>Xpdf >> Version 2.0

                                      Xpdf>>Xpdf >> Version 2.1

                                        Xpdf>>Xpdf >> Version 2.2

                                          Xpdf>>Xpdf >> Version 2.3

                                            Xpdf>>Xpdf >> Version 3.0

                                              Xpdf>>Xpdf >> Version 3.0.1

                                                Xpdf>>Xpdf >> Version 3.0.1_pl1

                                                  Xpdf>>Xpdf >> Version 3.0_pl2

                                                    Xpdf>>Xpdf >> Version 3.0_pl3

                                                      Configuraton 0

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      References

                                                      http://secunia.com/advisories/19644
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-979
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.debian.org/security/2006/dsa-998
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19164
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://secunia.com/advisories/19364
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-983
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.debian.org/security/2006/dsa-982
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19091
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://secunia.com/advisories/19065
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.osvdb.org/23834
                                                      Tags : vdb-entry, x_refsource_OSVDB
                                                      http://www.debian.org/security/2006/dsa-1019
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.securityfocus.com/bid/16748
                                                      Tags : vdb-entry, x_refsource_BID
                                                      http://secunia.com/advisories/18948
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-984
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19021
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      https://usn.ubuntu.com/270-1/
                                                      Tags : vendor-advisory, x_refsource_UBUNTU