CVE-2005-3624

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Score

CVSS 2.0 5.0 Medium

Status

Modified - secalert@redhat.com

Published

2005-12-31

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• Linux (Conectiva)
• Debian Linux (Debian)
• Cups (Easy Software Products)
• Linux (Gentoo)
• Kdegraphics (Kde)
• Koffice (Kde)
• Kpdf (Kde)
• Kword (Kde)
• Libextractor (Libextractor)
• Mandrake Linux (Mandrakesoft)
• Mandrake Linux Corporate Server (Mandrakesoft)
• Poppler (Poppler)
• Enterprise Linux (Redhat)
• Enterprise Linux Desktop (Redhat)
• Fedora Core (Redhat)
• Linux (Redhat)
• Linux Advanced Workstation (Redhat)
• Openserver (Sco)
• Propack (Sgi)
• Slackware Linux (Slackware)
• Suse Linux (Suse)
• Tetex (Tetex)
• Secure Linux (Trustix)
• Turbolinux (Turbolinux)
• Turbolinux Appliance Server (Turbolinux)
• Turbolinux Desktop (Turbolinux)
• Turbolinux Home (Turbolinux)
• Turbolinux Multimedia (Turbolinux)
• Turbolinux Personal (Turbolinux)
• Turbolinux Server (Turbolinux)
• Turbolinux Workstation (Turbolinux)
• Ubuntu Linux (Ubuntu)
• Xpdf (Xpdf)

References

• http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
• http://rhn.redhat.com/errata/RHSA-2006-0177.html
• http://scary.beasts.org/security/CESA-2005-003.txt
• http://secunia.com/advisories/18147
• http://secunia.com/advisories/18303
• http://secunia.com/advisories/18312
• http://secunia.com/advisories/18313
• http://secunia.com/advisories/18329
• http://secunia.com/advisories/18332
• http://secunia.com/advisories/18334
• http://secunia.com/advisories/18338
• http://secunia.com/advisories/18349
• http://secunia.com/advisories/18373
• http://secunia.com/advisories/18375
• http://secunia.com/advisories/18380
• http://secunia.com/advisories/18385
• http://secunia.com/advisories/18387
• http://secunia.com/advisories/18389
• http://secunia.com/advisories/18398
• http://secunia.com/advisories/18407
• http://secunia.com/advisories/18414
• http://secunia.com/advisories/18416
• http://secunia.com/advisories/18423
• http://secunia.com/advisories/18425
• http://secunia.com/advisories/18428
• http://secunia.com/advisories/18436