CVE-2005-3628
Fixed in a distro release EPSS 4%
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-7 |
| Debian 12 | libextractor | 0.5.9-1 |
| Debian 12 | xpdf | 3.01-4 |
| Debian 13 | cups | 1.1.22-7 |
| Debian 13 | libextractor | 0.5.9-1 |
| Debian 13 | xpdf | 3.01-4 |
| Debian 14 | cups | 1.1.22-7 |
| Debian 14 | libextractor | 0.5.9-1 |
| Debian 14 | xpdf | 3.01-4 |
| Debian 3.0 | cupsys | 1.1.14-5woody14 |
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.7 |
| Debian 3.0 | xpdf | 1.00-3.8 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge2 |
| Debian 3.1 | kdegraphics | 4:3.3.2-2sarge3 |
| Debian 3.1 | koffice | 1:1.3.5-4.sarge.2 |
| Debian 3.1 | libextractor | 0.4.2-2sarge2 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge1 |
| Debian 3.1 | pdftohtml | 0.36-11sarge1 |
| Debian 3.1 | tetex-bin | 2.0.2-30sarge4 |
| Debian 3.1 | xpdf | 3.00-13.4 |
| Debian 4.0 | gpdf | 2.10.0-1+etch1 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.8 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.8 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-7.3 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-7.3 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.10 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.10 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |