CVE-2006-1244

Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPathScanner.cc, (3) JBIG2Stream.cc, (4) JPXStream.cc, and/or (5) Stream.cc. NOTE: this description is based on Debian advisory DSA 979, which is based on changes that were made after other vulnerabilities such as CVE-2006-0301 and CVE-2005-3624 through CVE-2005-3628 were fixed. Some of these newer fixes appear to be security-relevant, although it is not clear if they fix specific issues or are defensive in nature.

• http://secunia.com/advisories/18948Patch, Vendor Advisory
• http://secunia.com/advisories/19021Patch, Vendor Advisory
• http://secunia.com/advisories/19065Patch, Vendor Advisory
• http://secunia.com/advisories/19091Patch, Vendor Advisory
• http://secunia.com/advisories/19164Patch, Vendor Advisory
• http://secunia.com/advisories/19364Patch, Vendor Advisory
• http://secunia.com/advisories/19644Patch, Vendor Advisory
• http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gzPatch
• http://www.debian.org/security/2006/dsa-1019Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-979Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-982Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-983Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-984Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-998Patch, Vendor Advisory
• http://www.osvdb.org/23834
• http://www.securityfocus.com/bid/16748
• https://usn.ubuntu.com/270-1/
• http://secunia.com/advisories/18948Patch, Vendor Advisory
• http://secunia.com/advisories/19021Patch, Vendor Advisory
• http://secunia.com/advisories/19065Patch, Vendor Advisory
• http://secunia.com/advisories/19091Patch, Vendor Advisory
• http://secunia.com/advisories/19164Patch, Vendor Advisory
• http://secunia.com/advisories/19364Patch, Vendor Advisory
• http://secunia.com/advisories/19644Patch, Vendor Advisory
• http://security.debian.org/pool/updates/main/p/pdfkit.framework/pdfkit.framework_0.8-2sarge3.diff.gzPatch
• http://www.debian.org/security/2006/dsa-1019Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-979Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-982Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-983Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-984Patch, Vendor Advisory
• http://www.debian.org/security/2006/dsa-998Patch, Vendor Advisory
• http://www.osvdb.org/23834
• http://www.securityfocus.com/bid/16748
• https://usn.ubuntu.com/270-1/

Published

Mar 15, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-1238SQL injection vulnerability in DSLogin 1.0, with magic_quote…
• CVE-2006-1239Cross-site scripting (XSS) vulnerability in issue/createissu…
• CVE-2006-1240Buffer overflow in inet_server.cpp in (1) fb_inet_server and…
• CVE-2006-1241Firebird 1.5.2.4731 installs (1) fb_lock_mgr, (2) gds_drop, …
• CVE-2006-1242The ip_push_pending_frames function in Linux 2.4.x and 2.6.x…
• CVE-2006-1243Directory traversal vulnerability in install05.php in Simple…
• CVE-2006-1245Buffer overflow in mshtml.dll in Microsoft Internet Explorer…
• CVE-2006-1246Unspecified vulnerability in mklvcopy in BOS.RTE.LVM in IBM …
• CVE-2006-1247rm_mlcache_file in bos.rte.install in AIX 5.1.0 through 5.3.…
• CVE-2006-1248Unspecified vulnerability in usermod in HP-UX B.11.00, B.11.…
• CVE-2006-1249Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 a…
• CVE-2006-1250Unspecified vulnerability in the Webmail module in Winmail b…