CVE-2005-3626

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Score
CVSS 2.0 5.0 Medium
Status
Modified - secalert@redhat.com
Published
2005-12-31
Last modified
2024-08-07
Weaknesses
CWE-399

Affected products

References