NetSight
medium5.0

CVE-2005-3626

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) …

Impact

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Affected products

VendorProductAffected versions
Easy Software ProductsCups
Versions 1.1.22, 1.1.22_rc1, 1.1.23, 1.1.23_rc1
KdeKdegraphics
Versions 3.2, 3.4.3
KdeKoffice
Versions 1.4, 1.4.1, 1.4.2
KdeKpdf
Versions 3.2, 3.4.3
KdeKword
Version 1.4.2
LibextractorLibextractor
All versions
PopplerPoppler
Version 0.4.2
SgiPropack
Version 3.0
TetexTetex
Versions 1.0.7, 2.0, 2.0.1, 2.0.2, 3.0
XpdfXpdf
Version 3.0
ConectivaLinux
Version 10.0
DebianDebian Linux
Versions 3.0, 3.1

Weakness classification

References