Skip to content
OpenAdvisories
Unscored RHSA-2005:034 3 CVEs

Red Hat Security Advisory: xpdf security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as xpdf 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::as xpdf-debuginfo 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::desktop xpdf-debuginfo 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::es xpdf 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::es xpdf-debuginfo 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf 1:3.00-11.5
Red Hat · RHEL 4 enterprise_linux:4::ws xpdf-debuginfo 1:3.00-11.5

Vulnerabilities 3

  • Unscored —

    Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-…

  • Unscored —

    Buffer overflow in the Decrypt::makeFileKey2 function in Decrypt.cc for xpdf 3.00 and earlier allows remote attackers t…

  • Unscored —

    The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectur…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=135066
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=144197
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=145052
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=147498
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_034.json
  • report
    https://access.redhat.com/security/cve/CVE-2004-1125
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617371
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2004-1125
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2004-1125
  • report
    https://access.redhat.com/security/cve/CVE-2005-0064
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617441
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0064
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0064
  • report
    https://access.redhat.com/security/cve/CVE-2005-0206
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1617493
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2005-0206
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2005-0206