CVE-2005-3626

Easy Software Products Cups - Resource Management Error

Title source: rule

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

References (85)

[Various Sources] ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

[Patch, Vendor Advisory] http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

[Patch, Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2006-0177.html

[Exploit] http://scary.beasts.org/security/CESA-2005-003.txt

[Third Party Advisory] http://secunia.com/advisories/18147

[Vendor Advisory] http://secunia.com/advisories/18303

[Patch, Vendor Advisory] http://secunia.com/advisories/18312

[Patch, Vendor Advisory] http://secunia.com/advisories/18313

[Vendor Advisory] http://secunia.com/advisories/18329

[Vendor Advisory] http://secunia.com/advisories/18332

[Patch, Vendor Advisory] http://secunia.com/advisories/18334

[Patch, Vendor Advisory] http://secunia.com/advisories/18335

[Patch, Vendor Advisory] http://secunia.com/advisories/18338

[Patch, Vendor Advisory] http://secunia.com/advisories/18349

[Third Party Advisory] http://secunia.com/advisories/18373

[Vendor Advisory] http://secunia.com/advisories/18375

[Third Party Advisory] http://secunia.com/advisories/18380

[Patch, Vendor Advisory] http://secunia.com/advisories/18385

[Patch, Vendor Advisory] http://secunia.com/advisories/18387

[Patch, Vendor Advisory] http://secunia.com/advisories/18389

... and 65 more

Scores

EPSS 0.0933

EPSS Percentile 92.6%

Classification

CWE

CWE-399

Status draft

Affected Products (50)

easy_software_products/cups

kde/kdegraphics

kde/koffice

kde/kpdf

kde/kword

libextractor/libextractor

poppler/poppler

sgi/propack

... and 35 more

Timeline

Published Dec 31, 2005

Tracked Since Feb 18, 2026