CVE catalog

CVE-2006-0301

poppler: CVE-2006-0301

Severity: High
Published: Jan 30, 2006, 10:03:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 4.51% · Oct 25, 2026

Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	xpdf	sid	`3.04+git20260802-1`	fixed
Debian	xpdf	forky	`3.04+git20260802-1`	fixed
Debian	xpdf	trixie	`3.04+git20250304-1`	fixed
Debian	xpdf	bookworm	`3.04+git20220601-1`	fixed
Debian	poppler	sid	`26.07.0-3`	fixed
Debian	poppler	forky	`26.07.0-3`	fixed
Debian	poppler	trixie	`25.03.0-5+deb13u4`	fixed
Debian	poppler	trixie-security	`25.03.0-5+deb13u3`	fixed
Debian	poppler	bookworm	`22.12.0-2+deb12u2`	fixed
Debian	poppler	bookworm-security	`22.12.0-2+deb12u3`	fixed
Debian	libextractor	sid	`1:1.19-2`	fixed
Debian	libextractor	forky	`1:1.19-2`	fixed
Debian	libextractor	trixie	`1:1.13-8`	fixed
Debian	libextractor	bookworm	`1:1.11-7`	fixed
Opensuse	poppler	tumbleweed	`21.08.0-1.3`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	xpdf	source	sid	`3.01-6`	medium	Not reported	[350785]
Debian	xpdf	source	forky	`3.01-6`	medium	Not reported	[350785]
Debian	xpdf	source	trixie	`3.01-6`	medium	Not reported	[350785]
Debian	xpdf	source	bookworm	`3.01-6`	medium	Not reported	[350785]
Debian	poppler	source	sid	`0.4.5-1`	medium	Not reported	Not reported
Debian	poppler	source	forky	`0.4.5-1`	medium	Not reported	Not reported
Debian	poppler	source	trixie	`0.4.5-1`	medium	Not reported	Not reported
Debian	poppler	source	bookworm	`0.4.5-1`	medium	Not reported	Not reported
Debian	libextractor	source	sid	`0.5.10-1`	medium	Not reported	Not reported
Debian	libextractor	source	forky	`0.5.10-1`	medium	Not reported	Not reported
Debian	libextractor	source	trixie	`0.5.10-1`	medium	Not reported	Not reported
Debian	libextractor	source	bookworm	`0.5.10-1`	medium	Not reported	Not reported
Opensuse	poppler	rpm	tumbleweed	`21.08.0-1.3`	Not reported	OPENSUSE-SU-2024:11181-1	Not reported

[Debian bug #350785]

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[extract]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[gir1.2-poppler-0.18]Unknown
Source package: [poppler]
Details (4)
- 22.12.0-2+deb12u2 · amd64 · bookworm
  Fixed · Fixed: 0.4.5-1
  dsa · poppler · debian · bookworm; dsa · poppler · debian · 12
- 22.12.0-2+deb12u2 · arm64 · bookworm
  Fixed · Fixed: 0.4.5-1
  dsa · poppler · debian · bookworm; dsa · poppler · debian · 12
- 22.12.0-2+deb12u3 · amd64 · bookworm-security
  Fixed · Fixed: 0.4.5-1
  dsa · poppler · debian · bookworm; dsa · poppler · debian · 12
- 22.12.0-2+deb12u3 · arm64 · bookworm-security
  Fixed · Fixed: 0.4.5-1
  dsa · poppler · debian · bookworm; dsa · poppler · debian · 12
[libextractor3]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-dev]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-archive]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-exiv2]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-flac]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-gif]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-gstreamer]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-html]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-jpeg]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-midi]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-mpeg]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-ogg]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-ole2]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-pdf]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-rpm]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugins-all]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · all · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · all · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugins-misc]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
[libextractor-plugin-thumbnailgtk]Unknown
Source package: [libextractor]
Details (2)
- 1:1.11-7 · amd64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12
- 1:1.11-7 · arm64 · bookworm
  Fixed · Fixed: 0.5.10-1
  dsa · libextractor · debian · bookworm; dsa · libextractor · debian · 12

Next results

Observed: Oct 23, 2026, 5:02:51 PM UTC

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]