CVE-2005-3628

Published: Dec 31, 2005Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.

Affected (1)

Products: Xpdf: Xpdf

Xpdf

1 product

Xpdf

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xpdf Xpdf	All versions

References (76)

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U (unsafe URL)

Source: secalert@redhat.com

http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18147

Source: secalert@redhat.com

http://secunia.com/advisories/18380

Source: secalert@redhat.com

http://secunia.com/advisories/18385

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18387

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18389

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18398

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18407

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18416

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18428

Source: secalert@redhat.com

http://secunia.com/advisories/18436

Source: secalert@redhat.com

http://secunia.com/advisories/18534

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18582

Source: secalert@redhat.com

PatchVendor Advisory

http://secunia.com/advisories/18674

Source: secalert@redhat.com

http://secunia.com/advisories/18675

Source: secalert@redhat.com

http://secunia.com/advisories/18679

Source: secalert@redhat.com

http://secunia.com/advisories/18908

Source: secalert@redhat.com

http://secunia.com/advisories/18913

Source: secalert@redhat.com

http://secunia.com/advisories/19230

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

Source: secalert@redhat.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-931

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-932

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-937

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-938

Source: secalert@redhat.com

http://www.debian.org/security/2005/dsa-940

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-936

Source: secalert@redhat.com

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-950

Source: secalert@redhat.com

PatchVendor Advisory

http://www.debian.org/security/2006/dsa-961

Source: secalert@redhat.com

http://www.debian.org/security/2006/dsa-962

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:010

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:011

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDKSA-2006:012

Source: secalert@redhat.com

http://www.redhat.com/support/errata/RHSA-2006-0160.html

Source: secalert@redhat.com

PatchVendor Advisory

http://www.securityfocus.com/archive/1/427053/100/0/threaded

Source: secalert@redhat.com

http://www.securityfocus.com/archive/1/427990/100/0/threaded

Source: secalert@redhat.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287

Source: secalert@redhat.com

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U (unsafe URL)