CVE-2005-3624

Exploit

EPSS 2.3%
Veröffentlicht 31.12.2005 05:00:00
Zuletzt bearbeitet 16.06.2026 22:17:16
Erkennungen
Login

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 85

NVD 127 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Easy Software Products ≫ Cups Version 1.1.22

Easy Software Products ≫ Cups Version 1.1.22_rc1

Easy Software Products ≫ Cups Version 1.1.23

Easy Software Products ≫ Cups Version 1.1.23_rc1

Kde ≫ Kdegraphics Version 3.2

Kde ≫ Kdegraphics Version 3.4.3

Kde ≫ Koffice Version 1.4

Kde ≫ Koffice Version 1.4.1

Kde ≫ Koffice Version 1.4.2

Kde ≫ Kpdf Version 3.2

Kde ≫ Kpdf Version 3.4.3

Kde ≫ Kword Version 1.4.2

Libextractor ≫ Libextractor

Poppler ≫ Poppler Version 0.4.2

Sgi ≫ Propack Version 3.0 Update sp6

Tetex ≫ Tetex Version 1.0.7

Tetex ≫ Tetex Version 2.0

Tetex ≫ Tetex Version 2.0.1

Tetex ≫ Tetex Version 2.0.2

Tetex ≫ Tetex Version 3.0

Xpdf ≫ Xpdf Version 3.0

Conectiva ≫ Linux Version 10.0

Debian ≫ Debian Linux Version 3.0

Debian ≫ Debian Linux Version 3.0 Edition alpha

Debian ≫ Debian Linux Version 3.0 Edition arm

Debian ≫ Debian Linux Version 3.0 Edition hppa

Debian ≫ Debian Linux Version 3.0 Edition ia-32

Debian ≫ Debian Linux Version 3.0 Edition ia-64

Debian ≫ Debian Linux Version 3.0 Edition m68k

Debian ≫ Debian Linux Version 3.0 Edition mips

Debian ≫ Debian Linux Version 3.0 Edition mipsel

Debian ≫ Debian Linux Version 3.0 Edition ppc

Debian ≫ Debian Linux Version 3.0 Edition s-390

Debian ≫ Debian Linux Version 3.0 Edition sparc

Debian ≫ Debian Linux Version 3.1

Debian ≫ Debian Linux Version 3.1 Edition alpha

Debian ≫ Debian Linux Version 3.1 Edition amd64

Debian ≫ Debian Linux Version 3.1 Edition arm

Debian ≫ Debian Linux Version 3.1 Edition hppa

Debian ≫ Debian Linux Version 3.1 Edition ia-32

Debian ≫ Debian Linux Version 3.1 Edition ia-64

Debian ≫ Debian Linux Version 3.1 Edition m68k

Debian ≫ Debian Linux Version 3.1 Edition mips

Debian ≫ Debian Linux Version 3.1 Edition mipsel

Debian ≫ Debian Linux Version 3.1 Edition ppc

Debian ≫ Debian Linux Version 3.1 Edition s-390

Debian ≫ Debian Linux Version 3.1 Edition sparc

Gentoo ≫ Linux

Mandrakesoft ≫ Mandrake Linux Version 10.1

Mandrakesoft ≫ Mandrake Linux Version 10.1 Edition x86-64

Mandrakesoft ≫ Mandrake Linux Version 10.2

Mandrakesoft ≫ Mandrake Linux Version 10.2 Edition x86-64

Mandrakesoft ≫ Mandrake Linux Version 2006

Mandrakesoft ≫ Mandrake Linux Version 2006 Edition x86-64

Mandrakesoft ≫ Mandrake Linux Corporate Server Version 2.1

Mandrakesoft ≫ Mandrake Linux Corporate Server Version 2.1 Edition x86_64

Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0

Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server

Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation

Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64

Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server

Redhat ≫ Enterprise Linux Version 4.0 Edition advanced_server

Redhat ≫ Enterprise Linux Version 4.0 Edition enterprise_server

Redhat ≫ Enterprise Linux Version 4.0 Edition workstation

Redhat ≫ Enterprise Linux Desktop Version 3.0

Redhat ≫ Enterprise Linux Desktop Version 4.0

Redhat ≫ Fedora Core Version core_1.0

Redhat ≫ Fedora Core Version core_2.0

Redhat ≫ Fedora Core Version core_3.0

Redhat ≫ Fedora Core Version core_4.0

Redhat ≫ Linux Version 7.3 Edition i386

Redhat ≫ Linux Version 9.0 Edition i386

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64

Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium

Sco ≫ Openserver Version 5.0.7

Sco ≫ Openserver Version 6.0

Slackware ≫ Slackware Linux Version 9.0

Slackware ≫ Slackware Linux Version 9.1

Slackware ≫ Slackware Linux Version 10.0

Slackware ≫ Slackware Linux Version 10.1

Slackware ≫ Slackware Linux Version 10.2

Suse ≫ Suse Linux Version 1.0

Suse ≫ Suse Linux Version 9.0 Edition enterprise_server

Suse ≫ Suse Linux Version 9.0 Edition personal

Suse ≫ Suse Linux Version 9.0 Edition professional

Suse ≫ Suse Linux Version 9.0 Edition s_390

Suse ≫ Suse Linux Version 9.0 Edition x86_64

Suse ≫ Suse Linux Version 9.1 Edition personal

Suse ≫ Suse Linux Version 9.1 Edition professional

Suse ≫ Suse Linux Version 9.1 Edition x86_64

Suse ≫ Suse Linux Version 9.2 Edition personal

Suse ≫ Suse Linux Version 9.2 Edition professional

Suse ≫ Suse Linux Version 9.2 Edition x86_64

Suse ≫ Suse Linux Version 9.3 Edition personal

Suse ≫ Suse Linux Version 9.3 Edition professional

Suse ≫ Suse Linux Version 9.3 Edition x86_64

Suse ≫ Suse Linux Version 10.0 Edition oss

Suse ≫ Suse Linux Version 10.0 Edition professional

Trustix ≫ Secure Linux Version 2.0

Trustix ≫ Secure Linux Version 2.2

Trustix ≫ Secure Linux Version 3.0

Turbolinux ≫ Turbolinux Version 10

Turbolinux ≫ Turbolinux Version fuji

Turbolinux ≫ Turbolinux Appliance Server Version 1.0_hosting_edition

Turbolinux ≫ Turbolinux Appliance Server Version 1.0_workgroup_edition

Turbolinux ≫ Turbolinux Desktop Version 10.0

Turbolinux ≫ Turbolinux Home

Turbolinux ≫ Turbolinux Multimedia

Turbolinux ≫ Turbolinux Personal

Turbolinux ≫ Turbolinux Server Version 8.0

Turbolinux ≫ Turbolinux Server Version 10.0

Turbolinux ≫ Turbolinux Server Version 10.0_x86

Turbolinux ≫ Turbolinux Workstation Version 8.0

Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ia64

Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ppc

Ubuntu ≫ Ubuntu Linux Version 5.04 Edition amd64

Ubuntu ≫ Ubuntu Linux Version 5.04 Edition i386

Ubuntu ≫ Ubuntu Linux Version 5.04 Edition powerpc

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition amd64

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition i386

Ubuntu ≫ Ubuntu Linux Version 5.10 Edition powerpc

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.3%	0.811

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:P/A:N

Es wurden noch keine Informationen zu CWE veröffentlicht.

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U

http://secunia.com/advisories/18517

Patch

Vendor Advisory

http://secunia.com/advisories/18398

Patch

Vendor Advisory

http://secunia.com/advisories/18407

Patch

Vendor Advisory

http://secunia.com/advisories/25729

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1

http://www.debian.org/security/2006/dsa-936

Patch

Vendor Advisory

http://www.securityfocus.com/archive/1/427053/100/0/threaded

http://www.securityfocus.com/archive/1/427990/100/0/threaded

http://www.vupen.com/english/advisories/2007/2280

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U

http://secunia.com/advisories/18554

Patch

Vendor Advisory

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

http://secunia.com/advisories/19230

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

Patch

http://secunia.com/advisories/18147

http://secunia.com/advisories/18303

Patch

Vendor Advisory

http://secunia.com/advisories/18313

Patch

Vendor Advisory

http://secunia.com/advisories/18349

Patch

Vendor Advisory

http://secunia.com/advisories/18380

http://secunia.com/advisories/18385

Patch

Vendor Advisory

http://secunia.com/advisories/18387

Patch

Vendor Advisory

http://secunia.com/advisories/18389

Patch

Vendor Advisory

http://secunia.com/advisories/18416

Patch

Vendor Advisory

http://secunia.com/advisories/18448

Patch

Vendor Advisory

http://secunia.com/advisories/18534

Patch

Vendor Advisory

http://secunia.com/advisories/18582

Patch

Vendor Advisory

http://secunia.com/advisories/18674

Vendor Advisory

http://secunia.com/advisories/18675

Vendor Advisory

http://secunia.com/advisories/18679

Vendor Advisory

http://secunia.com/advisories/18908

http://secunia.com/advisories/18913

Vendor Advisory

http://secunia.com/advisories/19377

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

http://www.debian.org/security/2005/dsa-931

http://www.debian.org/security/2005/dsa-932

http://www.debian.org/security/2005/dsa-937

http://www.debian.org/security/2005/dsa-938

http://www.debian.org/security/2005/dsa-940

http://www.debian.org/security/2006/dsa-950

Patch

Vendor Advisory

http://www.debian.org/security/2006/dsa-961

Patch

Vendor Advisory

http://www.debian.org/security/2006/dsa-962

Patch

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml

Patch

Vendor Advisory

http://www.kde.org/info/security/advisory-20051207-2.txt

Patch

Vendor Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2006:003

http://www.mandriva.com/security/advisories?name=MDKSA-2006:004

http://www.mandriva.com/security/advisories?name=MDKSA-2006:005

http://www.mandriva.com/security/advisories?name=MDKSA-2006:006

http://www.mandriva.com/security/advisories?name=MDKSA-2006:008

http://www.mandriva.com/security/advisories?name=MDKSA-2006:010

http://www.mandriva.com/security/advisories?name=MDKSA-2006:011

http://www.mandriva.com/security/advisories?name=MDKSA-2006:012

http://www.redhat.com/support/errata/RHSA-2006-0160.html

Patch

Vendor Advisory

http://secunia.com/advisories/18428

http://secunia.com/advisories/18436

http://scary.beasts.org/security/CESA-2005-003.txt

Vendor Advisory

Exploit

http://secunia.com/advisories/18463

http://www.trustix.org/errata/2006/0002/

http://rhn.redhat.com/errata/RHSA-2006-0177.html

Patch

Vendor Advisory

http://secunia.com/advisories/18312

Patch

Vendor Advisory

http://secunia.com/advisories/18329

Vendor Advisory

http://secunia.com/advisories/18332

Vendor Advisory

http://secunia.com/advisories/18334

http://secunia.com/advisories/18338

Patch

Vendor Advisory

http://secunia.com/advisories/18373

http://secunia.com/advisories/18375

Vendor Advisory

http://secunia.com/advisories/18414

http://secunia.com/advisories/18423

Vendor Advisory

http://secunia.com/advisories/18425

http://secunia.com/advisories/18642

Vendor Advisory

http://secunia.com/advisories/18644

Vendor Advisory

http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml

Patch

Vendor Advisory

http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html

http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html

http://www.redhat.com/support/errata/RHSA-2006-0163.html

http://www.securityfocus.com/bid/16143

Patch

http://www.vupen.com/english/advisories/2006/0047

https://exchange.xforce.ibmcloud.com/vulnerabilities/24022

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437

https://usn.ubuntu.com/236-1/

https://nvd.nist.gov/vuln/detail/CVE-2005-3624

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2005-3624

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2005-3624

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2005-3624