CVEvulnerability
CVE-2005-3628
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
Affected configurations
• xpdf xpdf
References
- ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U patches.sgi.com
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html Patch, Vendor Advisory
- http://secunia.com/advisories/18147 secunia.com
- http://secunia.com/advisories/18380 secunia.com
- http://secunia.com/advisories/18385 Patch, Vendor Advisory
- http://secunia.com/advisories/18387 Patch, Vendor Advisory
- http://secunia.com/advisories/18389 Patch, Vendor Advisory
- http://secunia.com/advisories/18398 Patch, Vendor Advisory
- http://secunia.com/advisories/18407 Patch, Vendor Advisory
- http://secunia.com/advisories/18416 Patch, Vendor Advisory
- http://secunia.com/advisories/18428 secunia.com
- http://secunia.com/advisories/18436 secunia.com
- http://secunia.com/advisories/18534 Patch, Vendor Advisory
- http://secunia.com/advisories/18582 Patch, Vendor Advisory
- http://secunia.com/advisories/18674 secunia.com
- http://secunia.com/advisories/18675 secunia.com
- http://secunia.com/advisories/18679 secunia.com
- http://secunia.com/advisories/18908 secunia.com
- http://secunia.com/advisories/18913 secunia.com
- http://secunia.com/advisories/19230 secunia.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 slackware.com
- http://www.debian.org/security/2005/dsa-931 www.debian.org
- http://www.debian.org/security/2005/dsa-932 www.debian.org
- http://www.debian.org/security/2005/dsa-937 www.debian.org
- http://www.debian.org/security/2005/dsa-938 www.debian.org
- http://www.debian.org/security/2005/dsa-940 www.debian.org
- http://www.debian.org/security/2006/dsa-936 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-950 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-961 www.debian.org
- http://www.debian.org/security/2006/dsa-962 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2006-0160.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/427053/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/427990/100/0/threaded www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287 oval.cisecurity.org
- ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U patches.sgi.com
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html Patch, Vendor Advisory
- http://secunia.com/advisories/18147 secunia.com
- http://secunia.com/advisories/18380 secunia.com
- http://secunia.com/advisories/18385 Patch, Vendor Advisory
- http://secunia.com/advisories/18387 Patch, Vendor Advisory
- http://secunia.com/advisories/18389 Patch, Vendor Advisory
- http://secunia.com/advisories/18398 Patch, Vendor Advisory
- http://secunia.com/advisories/18407 Patch, Vendor Advisory
- http://secunia.com/advisories/18416 Patch, Vendor Advisory
- http://secunia.com/advisories/18428 secunia.com
- http://secunia.com/advisories/18436 secunia.com
- http://secunia.com/advisories/18534 Patch, Vendor Advisory
- http://secunia.com/advisories/18582 Patch, Vendor Advisory
- http://secunia.com/advisories/18674 secunia.com
- http://secunia.com/advisories/18675 secunia.com
- http://secunia.com/advisories/18679 secunia.com
- http://secunia.com/advisories/18908 secunia.com
- http://secunia.com/advisories/18913 secunia.com
- http://secunia.com/advisories/19230 secunia.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 slackware.com
- http://www.debian.org/security/2005/dsa-931 www.debian.org
- http://www.debian.org/security/2005/dsa-932 www.debian.org
- http://www.debian.org/security/2005/dsa-937 www.debian.org
- http://www.debian.org/security/2005/dsa-938 www.debian.org
- http://www.debian.org/security/2005/dsa-940 www.debian.org
- http://www.debian.org/security/2006/dsa-936 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-950 Patch, Vendor Advisory
- http://www.debian.org/security/2006/dsa-961 www.debian.org
- http://www.debian.org/security/2006/dsa-962 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 www.mandriva.com
- http://www.redhat.com/support/errata/RHSA-2006-0160.html Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/427053/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/427990/100/0/threaded www.securityfocus.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287 oval.cisecurity.org