CVE-2005-3624 The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large inte...
MediumCVSS 5.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| easy software products cups | = 1.1.22 | No fix listed |
| easy software products cups | = 1.1.22_rc1 | No fix listed |
| easy software products cups | = 1.1.23 | No fix listed |
| easy software products cups | = 1.1.23_rc1 | No fix listed |
| kdegraphics | = 3.2 | No fix listed |
| kdegraphics | = 3.4.3 | No fix listed |
| KDE koffice | = 1.4 | No fix listed |
| KDE koffice | = 1.4.1 | No fix listed |
| KDE koffice | = 1.4.2 | No fix listed |
| KDE kpdf | = 3.2 | No fix listed |
| KDE kpdf | = 3.4.3 | No fix listed |
| KDE kword | = 1.4.2 | No fix listed |
| libextractor | All versions | No fix listed |
| poppler | = 0.4.2 | No fix listed |
| sgi propack | = 3.0-sp6 | No fix listed |
| tetex | = 1.0.7 | No fix listed |
| tetex | = 2.0 | No fix listed |
| tetex | = 2.0.1 | No fix listed |
| tetex | = 2.0.2 | No fix listed |
| tetex | = 3.0 | No fix listed |
| xpdf | = 3.0 | No fix listed |
| conectiva linux | = 10.0 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| gentoo linux | All versions | No fix listed |
Show 60 more
| Product | Affected versions | Fixed in |
|---|---|---|
| mandrakesoft mandrake linux | = 10.1 | No fix listed |
| mandrakesoft mandrake linux | = 10.2 | No fix listed |
| mandrakesoft mandrake linux | = 2006 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 2.1 | No fix listed |
| mandrakesoft mandrake linux corporate server | = 3.0 | No fix listed |
| redhat enterprise linux | = 2.1 | No fix listed |
| redhat enterprise linux | = 3.0 | No fix listed |
| redhat enterprise linux | = 4.0 | No fix listed |
| redhat enterprise linux desktop | = 3.0 | No fix listed |
| redhat enterprise linux desktop | = 4.0 | No fix listed |
| redhat fedora core | = core_1.0 | No fix listed |
| redhat fedora core | = core_2.0 | No fix listed |
| redhat fedora core | = core_3.0 | No fix listed |
| redhat fedora core | = core_4.0 | No fix listed |
| redhat linux | = 7.3 | No fix listed |
| redhat linux | = 9.0 | No fix listed |
| redhat linux advanced workstation | = 2.1 | No fix listed |
| sco openserver | = 5.0.7 | No fix listed |
| sco openserver | = 6.0 | No fix listed |
| slackware linux | = 9.0 | No fix listed |
| slackware linux | = 9.1 | No fix listed |
| slackware linux | = 10.0 | No fix listed |
| slackware linux | = 10.1 | No fix listed |
| slackware linux | = 10.2 | No fix listed |
| suse linux | = 1.0 | No fix listed |
| suse linux | = 9.0 | No fix listed |
| suse linux | = 9.1 | No fix listed |
| suse linux | = 9.2 | No fix listed |
| suse linux | = 9.3 | No fix listed |
| suse linux | = 10.0 | No fix listed |
| trustix secure linux | = 2.0 | No fix listed |
| trustix secure linux | = 2.2 | No fix listed |
| trustix secure linux | = 3.0 | No fix listed |
| turbolinux | = 10 | No fix listed |
| turbolinux | = fuji | No fix listed |
| turbolinux appliance server | = 1.0_hosting_edition | No fix listed |
| turbolinux appliance server | = 1.0_workgroup_edition | No fix listed |
| turbolinux desktop | = 10.0 | No fix listed |
| turbolinux home | All versions | No fix listed |
| turbolinux multimedia | All versions | No fix listed |
| turbolinux personal | All versions | No fix listed |
| turbolinux server | = 8.0 | No fix listed |
| turbolinux server | = 10.0 | No fix listed |
| turbolinux server | = 10.0_x86 | No fix listed |
| turbolinux workstation | = 8.0 | No fix listed |
| ubuntu linux | = 4.1 | No fix listed |
| ubuntu linux | = 5.04 | No fix listed |
| ubuntu linux | = 5.10 | No fix listed |
| debian/cups(Debian:12) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:13) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:14) | < 1.1.22-7 | 1.1.22-7 |
| debian/libextractor(Debian:12) | < 0.5.9-1 | 0.5.9-1 |
| debian/libextractor(Debian:13) | < 0.5.9-1 | 0.5.9-1 |
| debian/libextractor(Debian:14) | < 0.5.9-1 | 0.5.9-1 |
| debian/poppler(Debian:12) | < 0.4.4-1 | 0.4.4-1 |
| debian/poppler(Debian:13) | < 0.4.4-1 | 0.4.4-1 |
| debian/poppler(Debian:14) | < 0.4.4-1 | 0.4.4-1 |
| debian/xpdf(Debian:12) | < 3.01-4 | 3.01-4 |
| debian/xpdf(Debian:13) | < 3.01-4 | 3.01-4 |
| debian/xpdf(Debian:14) | < 3.01-4 | 3.01-4 |
References
- SUSE-SA:2006:001 patch vendor-advisory
- RHSA-2006:0177 patch vendor-advisory
- scary.beasts.org exploit vendor-advisory
- 18147 third-party-advisory
- 18303 patch third-party-advisory vendor-advisory
- 18312 patch third-party-advisory vendor-advisory
- 18313 patch third-party-advisory vendor-advisory
- 18329 third-party-advisory vendor-advisory
- 18332 third-party-advisory vendor-advisory
- 18334 third-party-advisory
- 18338 patch third-party-advisory vendor-advisory
- 18349 patch third-party-advisory vendor-advisory
- 18373 third-party-advisory
- 18375 third-party-advisory vendor-advisory
- 18380 third-party-advisory
- 18385 patch third-party-advisory vendor-advisory
- 18387 patch third-party-advisory vendor-advisory
- 18389 patch third-party-advisory vendor-advisory
- 18398 patch third-party-advisory vendor-advisory
- 18407 patch third-party-advisory vendor-advisory
- 18414 third-party-advisory
- 18416 patch third-party-advisory vendor-advisory
- 18423 third-party-advisory vendor-advisory
- 18425 third-party-advisory
- 18428 third-party-advisory
- 18436 third-party-advisory
- 18448 patch third-party-advisory vendor-advisory
- 18463 third-party-advisory
- 18517 patch third-party-advisory vendor-advisory
- 18534 patch third-party-advisory vendor-advisory
- 18554 patch third-party-advisory vendor-advisory
- 18582 patch third-party-advisory vendor-advisory
- 18642 third-party-advisory vendor-advisory
- 18644 third-party-advisory vendor-advisory
- 18674 third-party-advisory vendor-advisory
- 18675 third-party-advisory vendor-advisory
- 18679 third-party-advisory vendor-advisory
- 18908 third-party-advisory
- 18913 third-party-advisory vendor-advisory
- 19230 third-party-advisory
- 19377 third-party-advisory
- 25729 third-party-advisory
- SSA:2006-045-09 vendor-advisory
- SSA:2006-045-04 vendor-advisory
- 102972 vendor-advisory
- DSA-931 vendor-advisory
- DSA-932 vendor-advisory
- DSA-937 vendor-advisory
- DSA-938 vendor-advisory
- DSA-940 vendor-advisory
- DSA-936 patch vendor-advisory
- DSA-950 patch vendor-advisory
- DSA-961 patch vendor-advisory
- DSA-962 patch vendor-advisory
- GLSA-200601-02 patch vendor-advisory
- GLSA-200601-17 patch vendor-advisory
- www.kde.org patch vendor-advisory
- MDKSA-2006:003 vendor-advisory
- MDKSA-2006:004 vendor-advisory
- MDKSA-2006:005 vendor-advisory
- MDKSA-2006:006 vendor-advisory
- MDKSA-2006:008 vendor-advisory
- MDKSA-2006:010 vendor-advisory
- MDKSA-2006:011 vendor-advisory
- MDKSA-2006:012 vendor-advisory
- FEDORA-2005-025 vendor-advisory
- FEDORA-2005-026 vendor-advisory
- RHSA-2006:0160 patch vendor-advisory
- RHSA-2006:0163 vendor-advisory
- FLSA-2006:176751 vendor-advisory
- FLSA:175404 vendor-advisory
- 16143 patch vdb-entry
- 2006-0002 vendor-advisory
- ADV-2006-0047 vdb-entry
- ADV-2007-2280 vdb-entry
- xpdf-ccitt-faxstream-bo(24022) vdb-entry
- oval:org.mitre.oval:def:9437 signature vdb-entry
- USN-236-1 vendor-advisory
- Debian Security Tracker CVE-2005-3624 vendor-advisory
- bugs.debian.org issue-tracking