NVD

Id
69262  
Name
CVE-2005-3624  
Description
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2005-12-31  
Modified Date
2017-07-10  
Seq
2005-3624  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
357979 69262 CVE-2005-3624 SCOSA-2006.15  View
357980 69262 CVE-2005-3624 20051201-01-U  View
357981 69262 CVE-2005-3624 20060101-01-U  View
357982 69262 CVE-2005-3624 20060201-01-U  View
357983 69262 CVE-2005-3624 SUSE-SA:2006:001  View
357984 69262 CVE-2005-3624 oval:org.mitre.oval:def:9437  View
357985 69262 CVE-2005-3624 RHSA-2006:0177  View
357986 69262 CVE-2005-3624 http://scary.beasts.org/security/CESA-2005-003.txt  View
357987 69262 CVE-2005-3624 SSA:2006-045-09  View
357988 69262 CVE-2005-3624 SSA:2006-045-04  View
357989 69262 CVE-2005-3624 102972  View
357990 69262 CVE-2005-3624 DSA-931  View
357991 69262 CVE-2005-3624 DSA-932  View
357992 69262 CVE-2005-3624 DSA-937  View
357993 69262 CVE-2005-3624 DSA-938  View
357994 69262 CVE-2005-3624 DSA-940  View
357995 69262 CVE-2005-3624 DSA-936  View
357996 69262 CVE-2005-3624 DSA-950  View
357997 69262 CVE-2005-3624 DSA-961  View
357998 69262 CVE-2005-3624 DSA-962  View
357999 69262 CVE-2005-3624 GLSA-200601-02  View
358000 69262 CVE-2005-3624 GLSA-200601-17  View
358001 69262 CVE-2005-3624 http://www.kde.org/info/security/advisory-20051207-2.txt  View
358002 69262 CVE-2005-3624 MDKSA-2006:003  View
358003 69262 CVE-2005-3624 MDKSA-2006:004  View
358004 69262 CVE-2005-3624 MDKSA-2006:005  View
358005 69262 CVE-2005-3624 MDKSA-2006:006  View
358006 69262 CVE-2005-3624 MDKSA-2006:008  View
358007 69262 CVE-2005-3624 MDKSA-2006:011  View
358008 69262 CVE-2005-3624 MDKSA-2006:012  View
358009 69262 CVE-2005-3624 FEDORA-2005-025  View
358010 69262 CVE-2005-3624 FEDORA-2005-026  View
358011 69262 CVE-2005-3624 RHSA-2006:0160  View
358012 69262 CVE-2005-3624 RHSA-2006:0163  View
358013 69262 CVE-2005-3624 FLSA-2006:176751  View
358014 69262 CVE-2005-3624 FLSA:175404  View
358015 69262 CVE-2005-3624 16143  View
358016 69262 CVE-2005-3624 2006-0002  View
358017 69262 CVE-2005-3624 USN-236-1  View
358018 69262 CVE-2005-3624 ADV-2006-0047  View
358019 69262 CVE-2005-3624 ADV-2007-2280  View
358020 69262 CVE-2005-3624 xpdf-ccitt-faxstream-bo(24022)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57805 JVNDB-2006-000001 Xpdf の CCITTFaxStream() 関数における整数オーバーフローおよびアンダーフローの脆弱性 Xpdf には Stream.cc の CCITTFaxStream::CCITTFaxStream() 関数において、CCITTFaxDecode ストリームに含まれるマイナス、あるいは過大な整数値を処理した場合に整数オーバーフロー/アンダーフローが発生する脆弱性が存在します。 CVE-2005-3624 14826 CVE-2005-3624 69262 5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000001.html 2006-01-05 2007-06-28 View