Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
                
            Metrics
Affected Vendors & Products
Advisories
    | Source | ID | Title | 
|---|---|---|
  Debian DSA | 
                DSA-931-1 | New xpdf packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-932-1 | New kpdf packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-936-1 | New libextractor packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-937-1 | New tetex-bin packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-938-1 | New koffice packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-940-1 | New gpdf packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-950-1 | New CUPS packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-961-1 | New pdfkit.framework packages fix arbitrary code execution | 
  Debian DSA | 
                DSA-962-1 | New pdftohtml packages fix arbitrary code execution | 
  EUVD | 
                EUVD-2005-3623 | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference. | 
  Ubuntu USN | 
                USN-236-1 | xpdf vulnerabilities | 
  Ubuntu USN | 
                USN-236-2 | xpdf vulnerabilities in kword, kpdf | 
Fixes
    Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
        History
                    No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-07T23:17:23.446Z
Reserved: 2005-11-16T00:00:00
Link: CVE-2005-3626
No data.
Status : Deferred
Published: 2005-12-31T05:00:00.000
Modified: 2025-04-03T01:03:51.193
Link: CVE-2005-3626
                        OpenCVE Enrichment
                    No data.
 Debian DSA
 EUVD
 Ubuntu USN