Mô tả CVE

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

Thông tin CVE

Số liệu

Số liệu	Điểm	Mức độ nghiêm trọng	CVSS Vector	Nguồn
V2	7.6		AV:N/AC:H/Au:N/C:C/I:C/A:C	nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.

EPSS First.org

Sản phẩm được đề cập

Cấu hình 0

Gnome>>Gpdf >> Version 2.8.2

Libextractor>>Libextractor >> Version 0.3.6

Libextractor>>Libextractor >> Version 0.3.7

Libextractor>>Libextractor >> Version 0.3.8

Libextractor>>Libextractor >> Version 0.3.9

Libextractor>>Libextractor >> Version 0.3.11

Libextractor>>Libextractor >> Version 0.4

Libextractor>>Libextractor >> Version 0.4.1

Libextractor>>Libextractor >> Version 0.4.2

Libextractor>>Libextractor >> Version 0.5

Xpdf>>Xpdf >> Version 0.90

Xpdf>>Xpdf >> Version 0.91

Xpdf>>Xpdf >> Version 0.92

Xpdf>>Xpdf >> Version 0.93

Xpdf>>Xpdf >> Version 1.0

Xpdf>>Xpdf >> Version 1.0a

Xpdf>>Xpdf >> Version 1.1

Xpdf>>Xpdf >> Version 2.0

Xpdf>>Xpdf >> Version 2.1

Xpdf>>Xpdf >> Version 2.2

Xpdf>>Xpdf >> Version 2.3

Xpdf>>Xpdf >> Version 3.0

Xpdf>>Xpdf >> Version 3.0.1

Xpdf>>Xpdf >> Version 3.0.1_pl1

Xpdf>>Xpdf >> Version 3.0_pl2

Xpdf>>Xpdf >> Version 3.0_pl3

Cấu hình 0

Debian>>Debian_linux >> Version 3.1

Tài liệu tham khảo

http://secunia.com/advisories/19644
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2006/dsa-979
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.debian.org/security/2006/dsa-998
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/19164
Tags : third-party-advisory, x_refsource_SECUNIA

http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gz
Tags : x_refsource_MISC

http://secunia.com/advisories/19364
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2006/dsa-983
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.debian.org/security/2006/dsa-982
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/19091
Tags : third-party-advisory, x_refsource_SECUNIA

http://secunia.com/advisories/19065
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.osvdb.org/23834
Tags : vdb-entry, x_refsource_OSVDB

http://www.debian.org/security/2006/dsa-1019
Tags : vendor-advisory, x_refsource_DEBIAN

http://www.securityfocus.com/bid/16748
Tags : vdb-entry, x_refsource_BID

http://secunia.com/advisories/18948
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.debian.org/security/2006/dsa-984
Tags : vendor-advisory, x_refsource_DEBIAN

http://secunia.com/advisories/19021
Tags : third-party-advisory, x_refsource_SECUNIA

https://usn.ubuntu.com/270-1/
Tags : vendor-advisory, x_refsource_UBUNTU

Ngày	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	2.69%	–	–
2022-04-03	–	–	2.69%	–	–
2022-06-12	–	–	2.69%	–	–
2023-02-26	–	–	2.69%	–	–
2023-03-12	–	–	–	1.02%	–
2023-04-16	–	–	–	1.02%	–
2023-10-01	–	–	–	1.25%	–
2024-02-11	–	–	–	1.25%	–
2024-06-02	–	–	–	1.25%	–
2024-07-07	–	–	–	0.95%	–
2024-10-20	–	–	–	0.95%	–
2024-12-22	–	–	–	0.95%	–
2025-01-19	–	–	–	0.95%	–
2025-02-23	–	–	–	0.74%	–
2025-02-23	–	–	–	0.74%	–
2025-03-18	–	–	–	–	2.79%
2025-04-08	–	–	–	–	3.47%
2025-04-09	–	–	–	–	3.47%
2025-11-18	–	–	–	–	3.47%
2025-11-21	–	–	–	–	3.47%
2026-04-05	–	–	–	–	3.47%

Ngày	Phân vị
2022-02-06	63%
2022-04-03	81%
2022-06-12	82%
2023-02-26	83%
2023-03-12	81%
2023-04-16	82%
2023-10-01	84%
2024-02-11	85%
2024-06-02	86%
2024-07-07	83%
2024-10-20	84%
2024-12-22	83%
2025-01-19	83%
2025-02-23	81%
2025-02-23	81%
2025-03-18	85%
2025-04-08	86%
2025-04-09	87%
2025-11-18	86%
2025-11-21	87%
2026-04-05	88%

CVE-2006-1244 : Chi tiết

CVE-2006-1244

Mô tả CVE

Thông tin CVE

Số liệu

EPSS

Điểm EPSS

Phân vị EPSS

Sản phẩm được đề cập

Cấu hình 0

Cấu hình 0

Tài liệu tham khảo