CVEvulnerability

CVE-2005-3626

5.0 MEDIUM Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Affected configurations

• easy software products cups 1.1.22 • easy software products cups 1.1.22 rc1 • easy software products cups 1.1.23 • easy software products cups 1.1.23 rc1 • kde kdegraphics 3.2 • kde kdegraphics 3.4.3 • kde koffice 1.4 • kde koffice 1.4.1 • kde koffice 1.4.2 • kde kpdf 3.2 • kde kpdf 3.4.3 • kde kword 1.4.2 • libextractor libextractor • poppler poppler 0.4.2 • sgi propack 3.0 • tetex tetex 1.0.7 • tetex tetex 2.0 • tetex tetex 2.0.1 • tetex tetex 2.0.2 • tetex tetex 3.0 • xpdf xpdf 3.0 • conectiva linux 10.0 • debian debian linux 3.0 • debian debian linux 3.1 • gentoo linux • mandrakesoft mandrake linux 10.1 • mandrakesoft mandrake linux 10.2 • mandrakesoft mandrake linux 2006 • mandrakesoft mandrake linux corporate server 2.1 • mandrakesoft mandrake linux corporate server 3.0 • redhat enterprise linux 2.1 • redhat enterprise linux 3.0 • redhat enterprise linux 4.0 • redhat enterprise linux desktop 3.0 • redhat enterprise linux desktop 4.0 • redhat fedora core core 1.0 • redhat fedora core core 2.0 • redhat fedora core core 3.0 • redhat fedora core core 4.0 • redhat linux 7.3 • redhat linux 9.0 • redhat linux advanced workstation 2.1 • sco openserver 5.0.7 • sco openserver 6.0 • slackware slackware linux 9.0 • slackware slackware linux 9.1 • slackware slackware linux 10.0 • slackware slackware linux 10.1 • slackware slackware linux 10.2 • suse suse linux 1.0 • suse suse linux 9.0 • suse suse linux 9.1 • suse suse linux 9.2 • suse suse linux 9.3 • suse suse linux 10.0 • trustix secure linux 2.0 • trustix secure linux 2.2 • trustix secure linux 3.0 • turbolinux turbolinux 10 • turbolinux turbolinux fuji … and 13 more

Related

Weakness · not in database (1)

References