CVE-2006-1244 : Détail

CVE-2006-1244

3.47%V4
Network
2006-03-15
18h00 +00:00
2018-10-03
18h57 +00:00
Notifications pour un CVE
Restez informé de toutes modifications pour un CVE spécifique.
Gestion des notifications

Descriptions du CVE

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

Informations du CVE

Métriques

Métriques Score Gravité CVSS Vecteur Source
V2 7.6 AV:N/AC:H/Au:N/C:C/I:C/A:C nvd@nist.gov

EPSS

EPSS est un modèle de notation qui prédit la probabilité qu'une vulnérabilité soit exploitée.

Score EPSS

Le modèle EPSS produit un score de probabilité compris entre 0 et 1 (0 et 100 %). Plus la note est élevée, plus la probabilité qu'une vulnérabilité soit exploitée est grande.

Percentile EPSS

Le percentile est utilisé pour classer les CVE en fonction de leur score EPSS. Par exemple, une CVE dans le 95e percentile selon son score EPSS est plus susceptible d'être exploitée que 95 % des autres CVE. Ainsi, le percentile sert à comparer le score EPSS d'une CVE par rapport à d'autres CVE.

Products Mentioned

Configuraton 0

Gnome>>Gpdf >> Version 2.8.2

    Libextractor>>Libextractor >> Version 0.3.6

      Libextractor>>Libextractor >> Version 0.3.7

        Libextractor>>Libextractor >> Version 0.3.8

          Libextractor>>Libextractor >> Version 0.3.9

            Libextractor>>Libextractor >> Version 0.3.11

              Libextractor>>Libextractor >> Version 0.4

                Libextractor>>Libextractor >> Version 0.4.1

                  Libextractor>>Libextractor >> Version 0.4.2

                    Libextractor>>Libextractor >> Version 0.5

                      Xpdf>>Xpdf >> Version 0.90

                        Xpdf>>Xpdf >> Version 0.91

                          Xpdf>>Xpdf >> Version 0.92

                            Xpdf>>Xpdf >> Version 0.93

                              Xpdf>>Xpdf >> Version 1.0

                                Xpdf>>Xpdf >> Version 1.0a

                                  Xpdf>>Xpdf >> Version 1.1

                                    Xpdf>>Xpdf >> Version 2.0

                                      Xpdf>>Xpdf >> Version 2.1

                                        Xpdf>>Xpdf >> Version 2.2

                                          Xpdf>>Xpdf >> Version 2.3

                                            Xpdf>>Xpdf >> Version 3.0

                                              Xpdf>>Xpdf >> Version 3.0.1

                                                Xpdf>>Xpdf >> Version 3.0.1_pl1

                                                  Xpdf>>Xpdf >> Version 3.0_pl2

                                                    Xpdf>>Xpdf >> Version 3.0_pl3

                                                      Configuraton 0

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Debian>>Debian_linux >> Version 3.1

                                                      Références

                                                      http://secunia.com/advisories/19644
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-979
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.debian.org/security/2006/dsa-998
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19164
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://secunia.com/advisories/19364
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-983
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.debian.org/security/2006/dsa-982
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19091
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://secunia.com/advisories/19065
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.osvdb.org/23834
                                                      Tags : vdb-entry, x_refsource_OSVDB
                                                      http://www.debian.org/security/2006/dsa-1019
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://www.securityfocus.com/bid/16748
                                                      Tags : vdb-entry, x_refsource_BID
                                                      http://secunia.com/advisories/18948
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      http://www.debian.org/security/2006/dsa-984
                                                      Tags : vendor-advisory, x_refsource_DEBIAN
                                                      http://secunia.com/advisories/19021
                                                      Tags : third-party-advisory, x_refsource_SECUNIA
                                                      https://usn.ubuntu.com/270-1/
                                                      Tags : vendor-advisory, x_refsource_UBUNTU