CVE-2005-3624

Fixed in a distro release EPSS 2%

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Published 2006-01-06 · CVE record · OSV

Products: easy_software_products cups, kdegraphics, kde koffice, kde kpdf, kde kword, libextractor, poppler, sgi propack, tetex, xpdf, conectiva linux, debian_linux, gentoo linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux, redhat linux_advanced_workstation, sco openserver, slackware_linux, suse_linux, trustix secure_linux, turbolinux, turbolinux_appliance_server, turbolinux_desktop, turbolinux_home, turbolinux_multimedia, turbolinux_personal, turbolinux_server, turbolinux_workstation, ubuntu_linux

Distro releases