NetSight
IP …
medium5.0

CVE-2005-3624

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to co…

Impact

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Affected products

VendorProductAffected versions
Easy Software ProductsCups
Versions 1.1.22, 1.1.22_rc1, 1.1.23, 1.1.23_rc1
KdeKdegraphics
Versions 3.2, 3.4.3
KdeKoffice
Versions 1.4, 1.4.1, 1.4.2
KdeKpdf
Versions 3.2, 3.4.3
KdeKword
Version 1.4.2
LibextractorLibextractor
All versions
PopplerPoppler
Version 0.4.2
SgiPropack
Version 3.0
TetexTetex
Versions 1.0.7, 2.0, 2.0.1, 2.0.2, 3.0
XpdfXpdf
Version 3.0
ConectivaLinux
Version 10.0
DebianDebian Linux
Versions 3.0, 3.1

Weakness classification

CWE-189

References