CVE-2005-3624
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWE
- CWE-189
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conectiva:linux
- debian:debian_linux
- easy_software_products:cups
- gentoo:linux
- kde:kdegraphics
- kde:koffice
- kde:kpdf
- kde:kword
- libextractor:libextractor
- mandrakesoft:mandrake_linux
- mandrakesoft:mandrake_linux_corporate_server
- poppler:poppler
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation
- sco:openserver
- sgi:propack
- slackware:slackware_linux
- suse:suse_linux
- tetex:tetex
- trustix:secure_linux
- turbolinux:turbolinux
- turbolinux:turbolinux_appliance_server
- turbolinux:turbolinux_desktop
- turbolinux:turbolinux_home
- turbolinux:turbolinux_multimedia
- turbolinux:turbolinux_personal
- turbolinux:turbolinux_server
- turbolinux:turbolinux_workstation
- ubuntu:ubuntu_linux
- xpdf:xpdf
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
- ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
- ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
- ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html