CVE-2005-0206: Ascii Ptex

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities.

Affected products

  • Ascii Ptex: version 3.1.4 only
  • Cstex Cstetex: version 2.0.2 only
  • Debian Debian Linux: version 3.0 only
  • Easy Software Products Cups: version 1.0.4 only; version 1.0.4_8 only; version 1.1.1 only; version 1.1.4 only; version 1.1.4_2 only; version 1.1.4_3 only; …
  • Gentoo Linux: any version
  • Gnome Gpdf: version 0.110 only; version 0.112 only; version 0.131 only
  • Kde Kde: version 3.2 only; version 3.2.1 only; version 3.2.2 only; version 3.2.3 only; version 3.3 only; version 3.3.1 only
  • Kde Koffice: version 1.3 only; version 1.3.1 only; version 1.3.2 only; version 1.3.3 only; version 1.3_beta1 only; version 1.3_beta2 only; …
  • Kde Kpdf: version 3.2 only
  • Mandrakesoft Mandrake Linux Corporate Server: version 3.0 only
  • Pdftohtml Pdftohtml: version 0.32a only; version 0.32b only; version 0.33 only; version 0.33a only; version 0.34 only; version 0.35 only; …
  • Red Hat Enterprise Linux: version 2.1 only; version 3.0 only
  • Red Hat Enterprise Linux Desktop: version 3.0 only
  • Red Hat Fedora Core: version core_1.0 only; version core_2.0 only; version core_3.0 only
  • Red Hat Linux: version 9.0 only
  • Red Hat Linux Advanced Workstation: version 2.1 only
  • Sgi Advanced Linux Environment: version 3.0 only
  • Sgi Propack: version 3.0 only
  • Suse Suse Linux: version 1.0 only; version 2.0 only; version 3.0 only; version 4.0 only; version 4.2 only; version 4.3 only; …
  • Tetex Tetex: version 1.0.6 only; version 1.0.7 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only
  • Ubuntu Ubuntu Linux: version 4.1 only
  • Xpdf Xpdf: version 0.90 only; version 0.91 only; version 0.92 only; version 0.93 only; version 1.0 only; version 1.0a only; …

Published 2005-04-27. Last modified 2026-06-16.