CVE-2005-3626

CWE-39924 documents8 sources
Severity
5.0MEDIUM
EPSS
9.3%
top 7.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
28
Conectiva LinuxDebian Debian LinuxEasy Software Products Cups+25 more
Timeline
PublishedDec 31
Latest updateMay 3

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages29 packages

▶NVDeasy_software_products/cups4 versions+3
▶Debiancups< 1.1.22-7+3
▶Debianxpdf< 3.01-4+3
▶Debianpoppler< 0.4.3-2+3
▶Debianlibextractor< 0.5.9-1+3

Also affects: Debian Linux 3.0, 3.1, Ubuntu Linux 4.1, 5.04, 5.10, Enterprise Linux 2.1, 3.0, 4.0

Patches

Patch: lists.suse.com ↗Patch: rhn.redhat.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-v9w2-g4p4-9xg6: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2022-05-03
▶
CVEList
CVE-2005-3626: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2006-01-06
▶
OSV
CVE-2005-3626: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2005-12-31
▶

📋Vendor Advisories

4
Ubuntu
xpdf vulnerabilities in kword, kpdf↗2006-01-09
▶
Ubuntu
xpdf vulnerabilities↗2006-01-06
▶
Red Hat
security flaw↗2006-01-03
▶
Debian
CVE-2005-3626: cups - Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, l...↗2005
▶

💬Community

16
Bugzilla
CVE-2005-3626 security flaw↗2018-08-16
▶
Bugzilla
CVE-2005-3191 xpdf issues in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3624 xpdf issues in tetex for FC5test2 (CVE-2005-3625 CVE-2005-3626 CVE-2005-3627)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect poppler in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect kdegraphics in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶