CVEvulnerability

CVE-2005-3624

5.0 MEDIUM Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-189

Description

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Affected configurations

• easy software products cups 1.1.22 • easy software products cups 1.1.22 rc1 • easy software products cups 1.1.23 • easy software products cups 1.1.23 rc1 • kde kdegraphics 3.2 • kde kdegraphics 3.4.3 • kde koffice 1.4 • kde koffice 1.4.1 • kde koffice 1.4.2 • kde kpdf 3.2 • kde kpdf 3.4.3 • kde kword 1.4.2 • libextractor libextractor • poppler poppler 0.4.2 • sgi propack 3.0 • tetex tetex 1.0.7 • tetex tetex 2.0 • tetex tetex 2.0.1 • tetex tetex 2.0.2 • tetex tetex 3.0 • xpdf xpdf 3.0 • conectiva linux 10.0 • debian debian linux 3.0 • debian debian linux 3.1 • gentoo linux • mandrakesoft mandrake linux 10.1 • mandrakesoft mandrake linux 10.2 • mandrakesoft mandrake linux 2006 • mandrakesoft mandrake linux corporate server 2.1 • mandrakesoft mandrake linux corporate server 3.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux 4.0 • redhat enterprise linux desktop 3.0 • redhat enterprise linux desktop 4.0 • redhat fedora core core 1.0 • redhat fedora core core 2.0 • redhat fedora core core 3.0 • redhat fedora core core 4.0 • redhat linux 7.3 • redhat linux 9.0 • redhat linux advanced workstation 2.1 • sco openserver 5.0.7 • sco openserver 6.0 • slackware slackware linux 9.0 • slackware slackware linux 9.1 • slackware slackware linux 10.0 • slackware slackware linux 10.1 • slackware slackware linux 10.2 • suse suse linux 1.0 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • suse suse linux 9.3 • suse suse linux 10.0 • trustix secure linux 2.0 • trustix secure linux 2.2 • trustix secure linux 3.0 • turbolinux turbolinux 10 • turbolinux turbolinux fuji … and 13 more

Related

Weakness · not in database (1)

References