Patchwire CVEs, their patch status, and feeds to follow them

CVE-2005-3626

Fixed in a distro release EPSS 3%

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Published 2006-01-06 · CVE record · OSV

Products: easy_software_products cups, kdegraphics, kde koffice, kde kpdf, kde kword, libextractor, poppler, sgi propack, tetex, xpdf, conectiva linux, debian_linux, gentoo linux, mandrakesoft mandrake_linux, mandrakesoft mandrake_linux_corporate_server, redhat enterprise_linux, redhat enterprise_linux_desktop, redhat fedora_core, redhat linux, redhat linux_advanced_workstation, sco openserver, slackware_linux, suse_linux, trustix secure_linux, turbolinux, turbolinux_appliance_server, turbolinux_desktop, turbolinux_home, turbolinux_multimedia, turbolinux_personal, turbolinux_server, turbolinux_workstation, ubuntu_linux

Distro releases

ReleasePackageFixed in
Debian 12cups1.1.22-7
Debian 12libextractor0.5.9-1
Debian 12poppler0.4.3-2
Debian 12xpdf3.01-4
Debian 13cups1.1.22-7
Debian 13libextractor0.5.9-1
Debian 13poppler0.4.3-2
Debian 13xpdf3.01-4
Debian 14cups1.1.22-7
Debian 14libextractor0.5.9-1
Debian 14poppler0.4.3-2
Debian 14xpdf3.01-4
Debian 3.0cupsys1.1.14-5woody14
Debian 3.0tetex-bin1.0.7+20011202-7.7
Debian 3.0xpdf1.00-3.8
Debian 3.1gpdf2.8.2-1.2sarge2
Debian 3.1kdegraphics4:3.3.2-2sarge3
Debian 3.1koffice1:1.3.5-4.sarge.2
Debian 3.1libextractor0.4.2-2sarge2
Debian 3.1pdfkit.framework0.8-2sarge1
Debian 3.1pdftohtml0.36-11sarge1
Debian 3.1tetex-bin2.0.2-30sarge4
Debian 3.1xpdf3.00-13.4
Debian 4.0gpdf2.10.0-1+etch1
Red Hat Enterprise Linux 3cups1:1.1.17-13.3.36
Red Hat Enterprise Linux 3cups-debuginfo1:1.1.17-13.3.36
Red Hat Enterprise Linux 3cups-devel1:1.1.17-13.3.36
Red Hat Enterprise Linux 3cups-libs1:1.1.17-13.3.36
Red Hat Enterprise Linux 3tetex0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-afm0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-debuginfo0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-dvips0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-fonts0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-latex0:1.0.7-67.9
Red Hat Enterprise Linux 3tetex-xdvi0:1.0.7-67.9
Red Hat Enterprise Linux 3xpdf1:2.02-9.8
Red Hat Enterprise Linux 3xpdf-debuginfo1:2.02-9.8
Red Hat Enterprise Linux 4cups1:1.1.22-0.rc1.9.10
Red Hat Enterprise Linux 4cups-debuginfo1:1.1.22-0.rc1.9.10
Red Hat Enterprise Linux 4cups-devel1:1.1.22-0.rc1.9.10
Red Hat Enterprise Linux 4cups-libs1:1.1.22-0.rc1.9.10
Red Hat Enterprise Linux 4gpdf0:2.8.2-7.4
Red Hat Enterprise Linux 4gpdf-debuginfo0:2.8.2-7.4
Red Hat Enterprise Linux 4kdegraphics7:3.3.1-3.6
Red Hat Enterprise Linux 4kdegraphics-debuginfo7:3.3.1-3.6
Red Hat Enterprise Linux 4kdegraphics-devel7:3.3.1-3.6
Red Hat Enterprise Linux 4tetex0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-afm0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-debuginfo0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-doc0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-dvips0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-fonts0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-latex0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4tetex-xdvi0:2.0.2-22.EL4.7
Red Hat Enterprise Linux 4xpdf1:3.00-11.10
Red Hat Enterprise Linux 4xpdf-debuginfo1:3.00-11.10