CVE-2005-3624

CWE-18924 documents8 sources
Severity
5.0MEDIUM
EPSS
7.4%
top 8.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
28
Conectiva LinuxDebian Debian LinuxEasy Software Products Cups+25 more
Timeline
PublishedDec 31
Latest updateMay 3

Description

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages29 packages

▶Debiancups< 1.1.22-7+3
▶Debianxpdf< 3.01-4+3
▶Debianpoppler< 0.4.4-1+3
▶Debianlibextractor< 0.5.9-1+3
▶NVDkde/kpdf3.2, 3.4.3+1

Also affects: Debian Linux 3.0, 3.1, Ubuntu Linux 4.1, 5.04, 5.10, Enterprise Linux 2.1, 3.0, 4.0

Patches

Patch: lists.suse.com ↗Patch: rhn.redhat.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-rj76-p6p4-3fm5: The CCITTFaxStream::CCITTFaxStream function in Stream↗2022-05-03
▶
CVEList
CVE-2005-3624: The CCITTFaxStream::CCITTFaxStream function in Stream↗2006-01-06
▶
OSV
CVE-2005-3624: The CCITTFaxStream::CCITTFaxStream function in Stream↗2005-12-31
▶

📋Vendor Advisories

4
Ubuntu
xpdf vulnerabilities in kword, kpdf↗2006-01-09
▶
Ubuntu
xpdf vulnerabilities↗2006-01-06
▶
Red Hat
security flaw↗2006-01-03
▶
Debian
CVE-2005-3624: cups - The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, p...↗2005
▶

💬Community

16
Bugzilla
CVE-2005-3624 security flaw↗2018-08-16
▶
Bugzilla
CVE-2005-3191 xpdf issues in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3624 xpdf issues in tetex for FC5test2 (CVE-2005-3625 CVE-2005-3626 CVE-2005-3627)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect poppler in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect kdegraphics in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶