CVE-2005-3627
Fixed in a distro release EPSS 6%
Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large "Huffman table index" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-7 |
| Debian 12 | libextractor | 0.5.9-1 |
| Debian 12 | poppler | 0.4.4-1 |
| Debian 12 | xpdf | 3.01-4 |
| Debian 13 | cups | 1.1.22-7 |
| Debian 13 | libextractor | 0.5.9-1 |
| Debian 13 | poppler | 0.4.4-1 |
| Debian 13 | xpdf | 3.01-4 |
| Debian 14 | cups | 1.1.22-7 |
| Debian 14 | libextractor | 0.5.9-1 |
| Debian 14 | poppler | 0.4.4-1 |
| Debian 14 | xpdf | 3.01-4 |
| Debian 3.0 | cupsys | 1.1.14-5woody14 |
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.7 |
| Debian 3.0 | xpdf | 1.00-3.8 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge2 |
| Debian 3.1 | kdegraphics | 4:3.3.2-2sarge3 |
| Debian 3.1 | koffice | 1:1.3.5-4.sarge.2 |
| Debian 3.1 | libextractor | 0.4.2-2sarge2 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge1 |
| Debian 3.1 | pdftohtml | 0.36-11sarge1 |
| Debian 3.1 | tetex-bin | 2.0.2-30sarge4 |
| Debian 3.1 | xpdf | 3.00-13.4 |
| Debian 4.0 | gpdf | 2.10.0-1+etch1 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.36 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.36 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.36 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.36 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.8 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.8 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.10 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.10 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.10 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.10 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-7.4 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-7.4 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.10 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.10 |