CVE-2006-0746: Certain patches for kpdf do not include all relevant patches from xpdf that were associated with CVE-2005-3...

Security readout for executives and security teams

This is an old KDE kpdf issue where some patches did not fully carry over earlier xpdf fixes. A user opening a malicious or specially crafted PDF could still be exposed to the older vulnerability. The provided data does not include a CVSS score or modern affected-product list. Exposure is most likely on legacy Linux systems running vulnerable KDE kpdf packages, especially KDE 3.3.x-era distributions. Modern systems are unlikely to be affected unless they retain old packages or unsupported images. Prioritize this for legacy asset cleanup rather than emergency response. If affected KDE-era desktops or servers exist, patch or retire them because PDF parsing bugs can cross user trust boundaries. Mitigation focus: Apply the relevant vendor security update for the installed distribution.; Remove or disable kpdf on legacy systems if it is no longer needed.; Restrict opening untrusted PDFs on unsupported KDE environments..

Prepared

Jun 29, 2026, 14:02 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.