Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2005-3624

🗓️ 06 Jan 2006 22:00:00Reported by redhatType 
cve
 cve🔗 web.nvd.nist.gov👁 115 Views

CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows

Related
Detection
Refs
ReporterTitlePublishedViews
Family
bdu_fstec		Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
28 Apr 201500:00
–bdu_fstec
bdu_fstec		Vulnerabilities of the Gentoo Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
28 Apr 201500:00
–bdu_fstec
nessus		CentOS 3 / 4 : xpdf (CESA-2005:840)
3 Jul 200600:00
–nessus
nessus		CentOS 4 : kdegraphics (CESA-2005:868)
5 Jul 200600:00
–nessus
nessus		CentOS 3 / 4 : tetex (CESA-2006:0160)
3 Jul 200600:00
–nessus
nessus		CentOS 3 / 4 : cups (CESA-2006:0163)
3 Jul 200600:00
–nessus
nessus		CentOS 4 : gpdf (CESA-2006:0177)
5 Jul 200600:00
–nessus
nessus		Debian DSA-931-1 : xpdf - buffer overflows
14 Oct 200600:00
–nessus
nessus		Debian DSA-932-1 : kdegraphics - buffer overflows
14 Oct 200600:00
–nessus
nessus		Debian DSA-936-1 : libextractor - buffer overflows
14 Oct 200600:00
–nessus
Rows per page
NVD
Node
OR
easy_software_productscupsMatch1.1.22
easy_software_productscupsMatch1.1.22_rc1
easy_software_productscupsMatch1.1.23
easy_software_productscupsMatch1.1.23_rc1
kdekdegraphicsMatch3.2
kdekdegraphicsMatch3.4.3
kdekofficeMatch1.4
kdekofficeMatch1.4.1
kdekofficeMatch1.4.2
kdekpdfMatch3.2
kdekpdfMatch3.4.3
kdekwordMatch1.4.2
libextractorlibextractor
popplerpopplerMatch0.4.2
sgipropackMatch3.0sp6
tetextetexMatch1.0.7
tetextetexMatch2.0
tetextetexMatch2.0.1
tetextetexMatch2.0.2
tetextetexMatch3.0
xpdfxpdfMatch3.0
conectivalinuxMatch10.0
Node
OR
debiandebian_linuxMatch3.0
debiandebian_linuxMatch3.0alpha
debiandebian_linuxMatch3.0arm
debiandebian_linuxMatch3.0hppa
debiandebian_linuxMatch3.0ia-32
debiandebian_linuxMatch3.0ia-64
debiandebian_linuxMatch3.0m68k
debiandebian_linuxMatch3.0mips
debiandebian_linuxMatch3.0mipsel
debiandebian_linuxMatch3.0ppc
debiandebian_linuxMatch3.0s-390
debiandebian_linuxMatch3.0sparc
debiandebian_linuxMatch3.1
debiandebian_linuxMatch3.1alpha
debiandebian_linuxMatch3.1amd64
debiandebian_linuxMatch3.1arm
debiandebian_linuxMatch3.1hppa
debiandebian_linuxMatch3.1ia-32
debiandebian_linuxMatch3.1ia-64
debiandebian_linuxMatch3.1m68k
debiandebian_linuxMatch3.1mips
debiandebian_linuxMatch3.1mipsel
debiandebian_linuxMatch3.1ppc
debiandebian_linuxMatch3.1s-390
debiandebian_linuxMatch3.1sparc
gentoolinux
mandrakesoftmandrake_linuxMatch10.1
mandrakesoftmandrake_linuxMatch10.1x86-64
mandrakesoftmandrake_linuxMatch10.2
mandrakesoftmandrake_linuxMatch10.2x86-64
mandrakesoftmandrake_linuxMatch2006
mandrakesoftmandrake_linuxMatch2006x86-64
mandrakesoftmandrake_linux_corporate_serverMatch2.1
mandrakesoftmandrake_linux_corporate_serverMatch2.1x86_64
mandrakesoftmandrake_linux_corporate_serverMatch3.0
mandrakesoftmandrake_linux_corporate_serverMatch3.0x86_64
redhatenterprise_linuxMatch2.1advanced_server
redhatenterprise_linuxMatch2.1advanced_server_ia64
redhatenterprise_linuxMatch2.1enterprise_server
redhatenterprise_linuxMatch2.1enterprise_server_ia64
redhatenterprise_linuxMatch2.1workstation
redhatenterprise_linuxMatch2.1workstation_ia64
redhatenterprise_linuxMatch3.0advanced_server
redhatenterprise_linuxMatch3.0enterprise_server
redhatenterprise_linuxMatch3.0workstation_server
redhatenterprise_linuxMatch4.0advanced_server
redhatenterprise_linuxMatch4.0enterprise_server
redhatenterprise_linuxMatch4.0workstation
redhatenterprise_linux_desktopMatch3.0
redhatenterprise_linux_desktopMatch4.0
redhatfedora_coreMatchcore_1.0
redhatfedora_coreMatchcore_2.0
redhatfedora_coreMatchcore_3.0
redhatfedora_coreMatchcore_4.0
redhatlinuxMatch7.3i386
redhatlinuxMatch9.0i386
redhatlinux_advanced_workstationMatch2.1ia64
redhatlinux_advanced_workstationMatch2.1itanium
scoopenserverMatch5.0.7
scoopenserverMatch6.0
slackwareslackware_linuxMatch9.0
slackwareslackware_linuxMatch9.1
slackwareslackware_linuxMatch10.0
slackwareslackware_linuxMatch10.1
slackwareslackware_linuxMatch10.2
susesuse_linuxMatch1.0
susesuse_linuxMatch9.0enterprise_server
susesuse_linuxMatch9.0personal
susesuse_linuxMatch9.0professional
susesuse_linuxMatch9.0s_390
susesuse_linuxMatch9.0x86_64
susesuse_linuxMatch9.1personal
susesuse_linuxMatch9.1professional
susesuse_linuxMatch9.1x86_64
susesuse_linuxMatch9.2personal
susesuse_linuxMatch9.2professional
susesuse_linuxMatch9.2x86_64
susesuse_linuxMatch9.3personal
susesuse_linuxMatch9.3professional
susesuse_linuxMatch9.3x86_64
susesuse_linuxMatch10.0oss
susesuse_linuxMatch10.0professional
trustixsecure_linuxMatch2.0
trustixsecure_linuxMatch2.2
trustixsecure_linuxMatch3.0
turbolinuxturbolinuxMatch10
turbolinuxturbolinuxMatchfuji
turbolinuxturbolinux_appliance_serverMatch1.0_hosting_edition
turbolinuxturbolinux_appliance_serverMatch1.0_workgroup_edition
turbolinuxturbolinux_desktopMatch10.0
turbolinuxturbolinux_home
turbolinuxturbolinux_multimedia
turbolinuxturbolinux_personal
turbolinuxturbolinux_serverMatch8.0
turbolinuxturbolinux_serverMatch10.0
turbolinuxturbolinux_serverMatch10.0_x86
turbolinuxturbolinux_workstationMatch8.0
ubuntuubuntu_linuxMatch4.1ia64
ubuntuubuntu_linuxMatch4.1ppc
ubuntuubuntu_linuxMatch5.04amd64
ubuntuubuntu_linuxMatch5.04i386
ubuntuubuntu_linuxMatch5.04powerpc
ubuntuubuntu_linuxMatch5.10amd64
ubuntuubuntu_linuxMatch5.10i386
ubuntuubuntu_linuxMatch5.10powerpc

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
16 Jun 2026 22:17Current
6.3Medium risk
Vulners AI Score6.3
CVSS 25
EPSS0.02301
CWE-189
ccittfaxstreamccittfaxdecodeinteger overflowsinteger underflowsxpdfgpdfkpdfpdftohtmlpopplertetexcupslibextractornvd
115