CVE-2005-3624

Easy Software Products Cups - Numeric Error

Title source: rule

Description

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

References (82)

[Various Sources] ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

[Patch] http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

[Patch, Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2006-0177.html

[Exploit, Vendor Advisory] http://scary.beasts.org/security/CESA-2005-003.txt

[Patch, Vendor Advisory] http://secunia.com/advisories/18303

[Patch, Vendor Advisory] http://secunia.com/advisories/18312

[Patch, Vendor Advisory] http://secunia.com/advisories/18313

[Vendor Advisory] http://secunia.com/advisories/18329

[Vendor Advisory] http://secunia.com/advisories/18332

[Patch, Vendor Advisory] http://secunia.com/advisories/18338

[Patch, Vendor Advisory] http://secunia.com/advisories/18349

[Vendor Advisory] http://secunia.com/advisories/18375

[Patch, Vendor Advisory] http://secunia.com/advisories/18385

[Patch, Vendor Advisory] http://secunia.com/advisories/18387

[Patch, Vendor Advisory] http://secunia.com/advisories/18389

[Patch, Vendor Advisory] http://secunia.com/advisories/18398

[Patch, Vendor Advisory] http://secunia.com/advisories/18407

[Patch, Vendor Advisory] http://secunia.com/advisories/18416

[Vendor Advisory] http://secunia.com/advisories/18423

[Patch, Vendor Advisory] http://secunia.com/advisories/18448

... and 62 more

Scores

EPSS 0.0736

EPSS Percentile 91.6%

Classification

CWE

CWE-189

Status draft

Affected Products (50)

easy_software_products/cups

easy_software_products/cups

easy_software_products/cups

easy_software_products/cups

kde/kdegraphics

kde/kdegraphics

kde/koffice

kde/koffice

kde/koffice

kde/kpdf

kde/kpdf

kde/kword

libextractor/libextractor

poppler/poppler

sgi/propack

... and 35 more

Timeline

Published Dec 31, 2005

Tracked Since Feb 18, 2026