| Package | Affected versions | Patched versions |
|---|---|---|
| ptex | = 3.1.4 | |
| cstetex | = 2.0.2 | |
| cups | = 1.0.4= 1.0.4_8= 1.1.1= 1.1.10= 1.1.12= 1.1.13= 1.1.14= 1.1.15= 1.1.16= 1.1.17= 1.1.18= 1.1.19= 1.1.19_rc5= 1.1.20= 1.1.4= 1.1.4_2= 1.1.4_3= 1.1.4_5= 1.1.6= 1.1.7 | |
| gpdf | = 0.110= 0.112= 0.131 | |
| koffice | = 1.3= 1.3.1= 1.3.2= 1.3.3= 1.3_beta1= 1.3_beta2= 1.3_beta3 | |
| kpdf | = 3.2 | |
| pdftohtml | = 0.32a= 0.32b= 0.33= 0.33a= 0.34= 0.35= 0.36 | |
| propack | = 3.0 | |
| tetex | = 1.0.6= 1.0.7= 2.0= 2.0.1= 2.0.2 | |
| xpdf | = 0.90= 0.91= 0.92= 0.93= 1.0= 1.0a= 1.1= 2.0= 2.1= 2.3= 3.0 |
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free