CVE-2005-3624

CVE-2005-3624 affects multiple PDF tools (xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is in CCITTFaxDecode handling in Stream.cc, where negative or very large integers can trigger integer overflows/underflows, leading to heap corruption. The documented impact...

CVE-2004-0889

CVE-2004-0889 involves multiple integer overflows in xpdf 3.0 and in code paths that reuse xpdf (e.g., in CUPS) that can be exploited remotely to crash the service (DoS) and potentially execute arbitrary code. The description confirms a remote impact and the possibility of code execution, tied to...

CVE-2005-0206

Technical details about CVE-2005-0206 are not provided in the connected documents. Available sources reference related issues (CVE-2004-0888) and patch notes without explicit impact, affected products, or fixes for this CVE.

CVE-2005-3625

CVE-2005-3625 is confirmed to affect Xpdf and related tools (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is a denial-of-service in PDF stream handling where streams that end prematurely can cause an infinite loop, demonstrated for the CCITTFaxDecode and DCTDecode s...

CVE-2005-3626

CVE-2005-3626 affects Xpdf and related components (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The vulnerability arises from a crafted FlateDecode stream that triggers a null dereference, leading to a denial of service (crash). The connected Nessus entry (NEWSTART_CGSL_NS-SA...

CVE-2004-0888

CVE-2004-0888 : Multiple integer overflows in xpdf (v2.0/v3.0) and in code that uses xpdf (e.g., CUPS, gpdf, kdegraphics) allow remote attackers to crash services and possibly execute arbitrary code. Some reports note 64-bit builds can exacerbate the overflow (pdftops/filter path). Remediation is...

CVE-2006-6120

CVE-2006-6120 affects KOffice before 1.6.1, specifically the KPresenter PPT import filter (filters/olefilters/lib/klaola.cc). The vulnerability is an integer overflow in the PPT handling path that can lead to a heap-based buffer overflow when a crafted PPT file is opened, enabling a user‑assisted...

CVE-2005-2971

CVE-2005-2971 : Heap-based buffer overflow in the KWord RTF importer of KOffice 1.2.0–1.4.1 allows remote attackers to execute arbitrary code via a crafted RTF file. Root cause: buffer overflow in the importer. Affected software is the KWord component of KOffice; multiple advisories (e.g., Debian...

CVE-2012-3455

CVE-2012-3455 is a heap-based buffer overflow in the MS Word ODF import filter of Calligra/KOffice, specifically in read() of styles.cpp. The flaw can crash the application or allow arbitrary code execution via a crafted ODF style in affected documents (reported for Calligra/KOffice 2.3.3 and ear...