CVE-2005-3624
Detail
Deferred
This CVE record is not being prioritized for NVD enrichment efforts due to resource or other concerns.
Current Description
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
View Analysis Description
Analysis
Description
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Metrics
CVSS Version 4.0
CVSS Version 3.x
CVSS Version 2.0
NVD enrichment efforts reference publicly available information to associate
vector strings. CVSS information contributed by other sources is also
displayed.
CVSS 4.0 Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 3.x Severity and Vector Strings:
NVD assessment
not yet provided.
CVSS 2.0 Severity and Vector Strings:
Vector:
(AV:N/AC:L/Au:N/C:N/I:P/A:N)
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace.
We have provided these links to other web sites because they
may have information that would be of interest to you. No
inferences should be drawn on account of other sites being
referenced, or not, from this page. There may be other web
sites that are more appropriate for your purpose. NIST does
not necessarily endorse the views expressed, or concur with
the facts presented on these sites. Further, NIST does not
endorse any commercial products that may be mentioned on
these sites. Please address comments about this page to nvd@nist.gov .
URL
Source(s)
Tag(s)
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
CVE, Inc., Red Hat
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
CVE, Inc., Red Hat
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
CVE, Inc., Red Hat
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
CVE, Inc., Red Hat
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
CVE, Inc., Red Hat
Patch
http://rhn.redhat.com/errata/RHSA-2006-0177.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://scary.beasts.org/security/CESA-2005-003.txt
CVE, Inc., Red Hat
Exploit
Vendor Advisory
http://secunia.com/advisories/18147
CVE, Inc., Red Hat
http://secunia.com/advisories/18303
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18312
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18313
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18329
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18332
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18334
CVE, Inc., Red Hat
http://secunia.com/advisories/18338
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18349
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18373
CVE, Inc., Red Hat
http://secunia.com/advisories/18375
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18380
CVE, Inc., Red Hat
http://secunia.com/advisories/18385
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18387
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18389
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18398
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18407
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18414
CVE, Inc., Red Hat
http://secunia.com/advisories/18416
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18423
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18425
CVE, Inc., Red Hat
http://secunia.com/advisories/18428
CVE, Inc., Red Hat
http://secunia.com/advisories/18436
CVE, Inc., Red Hat
http://secunia.com/advisories/18448
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18463
CVE, Inc., Red Hat
http://secunia.com/advisories/18517
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18534
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18554
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18582
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://secunia.com/advisories/18642
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18644
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18674
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18675
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18679
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/18908
CVE, Inc., Red Hat
http://secunia.com/advisories/18913
CVE, Inc., Red Hat
Vendor Advisory
http://secunia.com/advisories/19230
CVE, Inc., Red Hat
http://secunia.com/advisories/19377
CVE, Inc., Red Hat
http://secunia.com/advisories/25729
CVE, Inc., Red Hat
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
CVE, Inc., Red Hat
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
CVE, Inc., Red Hat
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
CVE, Inc., Red Hat
http://www.debian.org/security/2005/dsa-931
CVE, Inc., Red Hat
http://www.debian.org/security/2005/dsa-932
CVE, Inc., Red Hat
http://www.debian.org/security/2005/dsa-937
CVE, Inc., Red Hat
http://www.debian.org/security/2005/dsa-938
CVE, Inc., Red Hat
http://www.debian.org/security/2005/dsa-940
CVE, Inc., Red Hat
http://www.debian.org/security/2006/dsa-936
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-950
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-961
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-962
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.kde.org/info/security/advisory-20051207-2.txt
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
CVE, Inc., Red Hat
http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
CVE, Inc., Red Hat
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
CVE, Inc., Red Hat
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
CVE, Inc., Red Hat
http://www.redhat.com/support/errata/RHSA-2006-0160.html
CVE, Inc., Red Hat
Patch
Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0163.html
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/427053/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/archive/1/427990/100/0/threaded
CVE, Inc., Red Hat
http://www.securityfocus.com/bid/16143
CVE, Inc., Red Hat
Patch
http://www.trustix.org/errata/2006/0002/
CVE, Inc., Red Hat
http://www.vupen.com/english/advisories/2006/0047
CVE, Inc., Red Hat
http://www.vupen.com/english/advisories/2007/2280
CVE, Inc., Red Hat
https://exchange.xforce.ibmcloud.com/vulnerabilities/24022
CVE, Inc., Red Hat
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437
CVE, Inc., Red Hat
https://usn.ubuntu.com/236-1/
CVE, Inc., Red Hat
Weakness Enumeration
CWE-ID
CWE Name
Source
CWE-189
Numeric Errors
NIST
Change History
9 change records found show changes
CVE Modified by CVE 11/20/2024 7:02:16 PM
Action
Type
Old Value
New Value
Added
Reference
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
Added
Reference
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
Added
Reference
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
Added
Reference
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
Added
Reference
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
Added
Reference
http://rhn.redhat.com/errata/RHSA-2006-0177.html
Added
Reference
http://scary.beasts.org/security/CESA-2005-003.txt
Added
Reference
http://secunia.com/advisories/18147
Added
Reference
http://secunia.com/advisories/18303
Added
Reference
http://secunia.com/advisories/18312
Added
Reference
http://secunia.com/advisories/18313
Added
Reference
http://secunia.com/advisories/18329
Added
Reference
http://secunia.com/advisories/18332
Added
Reference
http://secunia.com/advisories/18334
Added
Reference
http://secunia.com/advisories/18338
Added
Reference
http://secunia.com/advisories/18349
Added
Reference
http://secunia.com/advisories/18373
Added
Reference
http://secunia.com/advisories/18375
Added
Reference
http://secunia.com/advisories/18380
Added
Reference
http://secunia.com/advisories/18385
Added
Reference
http://secunia.com/advisories/18387
Added
Reference
http://secunia.com/advisories/18389
Added
Reference
http://secunia.com/advisories/18398
Added
Reference
http://secunia.com/advisories/18407
Added
Reference
http://secunia.com/advisories/18414
Added
Reference
http://secunia.com/advisories/18416
Added
Reference
http://secunia.com/advisories/18423
Added
Reference
http://secunia.com/advisories/18425
Added
Reference
http://secunia.com/advisories/18428
Added
Reference
http://secunia.com/advisories/18436
Added
Reference
http://secunia.com/advisories/18448
Added
Reference
http://secunia.com/advisories/18463
Added
Reference
http://secunia.com/advisories/18517
Added
Reference
http://secunia.com/advisories/18534
Added
Reference
http://secunia.com/advisories/18554
Added
Reference
http://secunia.com/advisories/18582
Added
Reference
http://secunia.com/advisories/18642
Added
Reference
http://secunia.com/advisories/18644
Added
Reference
http://secunia.com/advisories/18674
Added
Reference
http://secunia.com/advisories/18675
Added
Reference
http://secunia.com/advisories/18679
Added
Reference
http://secunia.com/advisories/18908
Added
Reference
http://secunia.com/advisories/18913
Added
Reference
http://secunia.com/advisories/19230
Added
Reference
http://secunia.com/advisories/19377
Added
Reference
http://secunia.com/advisories/25729
Added
Reference
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
Added
Reference
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
Added
Reference
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
Added
Reference
http://www.debian.org/security/2005/dsa-931
Added
Reference
http://www.debian.org/security/2005/dsa-932
Added
Reference
http://www.debian.org/security/2005/dsa-937
Added
Reference
http://www.debian.org/security/2005/dsa-938
Added
Reference
http://www.debian.org/security/2005/dsa-940
Added
Reference
http://www.debian.org/security/2006/dsa-936
Added
Reference
http://www.debian.org/security/2006/dsa-950
Added
Reference
http://www.debian.org/security/2006/dsa-961
Added
Reference
http://www.debian.org/security/2006/dsa-962
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
Added
Reference
http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
Added
Reference
http://www.kde.org/info/security/advisory-20051207-2.txt
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
Added
Reference
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
Added
Reference
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2006-0160.html
Added
Reference
http://www.redhat.com/support/errata/RHSA-2006-0163.html
Added
Reference
http://www.securityfocus.com/archive/1/427053/100/0/threaded
Added
Reference
http://www.securityfocus.com/archive/1/427990/100/0/threaded
Added
Reference
http://www.securityfocus.com/bid/16143
Added
Reference
http://www.trustix.org/errata/2006/0002/
Added
Reference
http://www.vupen.com/english/advisories/2006/0047
Added
Reference
http://www.vupen.com/english/advisories/2007/2280
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/24022
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437
Added
Reference
https://usn.ubuntu.com/236-1/
CVE Modified by Red Hat, Inc. 5/13/2024 9:32:27 PM
Action
Type
Old Value
New Value
CVE Modified by Red Hat, Inc. 10/19/2018 11:37:14 AM
Action
Type
Old Value
New Value
Added
Reference
http://www.securityfocus.com/archive/1/427053/100/0/threaded [No Types Assigned]
Added
Reference
http://www.securityfocus.com/archive/1/427990/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded [No Types Assigned]
Removed
Reference
http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/03/2018 5:32:13 PM
Action
Type
Old Value
New Value
Added
Reference
https://usn.ubuntu.com/236-1/ [No Types Assigned]
Removed
Reference
http://www.ubuntulinux.org/support/documentation/usn/usn-236-1 [No Types Assigned]
CVE Modified by Red Hat, Inc. 10/10/2017 9:30:26 PM
Action
Type
Old Value
New Value
Added
Reference
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437 [No Types Assigned]
Removed
Reference
http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9437 [No Types Assigned]
CVE Modified by Red Hat, Inc. 7/10/2017 9:33:14 PM
Action
Type
Old Value
New Value
Added
Reference
https://exchange.xforce.ibmcloud.com/vulnerabilities/24022 [No Types Assigned]
Removed
Reference
http://xforce.iss.net/xforce/xfdb/24022 [No Types Assigned]
CVE Modified by Red Hat, Inc. 2/19/2017 12:09:52 AM
Action
Type
Old Value
New Value
Added
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 [No Types Assigned]
CVE Modified by Red Hat, Inc. 11/18/2016 9:59:38 PM
Action
Type
Old Value
New Value
Removed
Reference
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 [No Types Assigned]
Initial CVE Analysis 5/16/2006 12:14:00 AM
Action
Type
Old Value
New Value
Quick Info
CVE Dictionary Entry: CVE-2005-3624 NVD
Published Date: 12/31/2005 NVD
Last Modified: 04/02/2025
Source: Red Hat, Inc.