CVE - CVE-2005-3628

CVE-ID
CVE-2005-3628	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:18147 URL:http://secunia.com/advisories/18147 MISC:18380 URL:http://secunia.com/advisories/18380 MISC:18385 URL:http://secunia.com/advisories/18385 MISC:18387 URL:http://secunia.com/advisories/18387 MISC:18389 URL:http://secunia.com/advisories/18389 MISC:18398 URL:http://secunia.com/advisories/18398 MISC:18407 URL:http://secunia.com/advisories/18407 MISC:18416 URL:http://secunia.com/advisories/18416 MISC:18428 URL:http://secunia.com/advisories/18428 MISC:18436 URL:http://secunia.com/advisories/18436 MISC:18534 URL:http://secunia.com/advisories/18534 MISC:18582 URL:http://secunia.com/advisories/18582 MISC:18674 URL:http://secunia.com/advisories/18674 MISC:18675 URL:http://secunia.com/advisories/18675 MISC:18679 URL:http://secunia.com/advisories/18679 MISC:18908 URL:http://secunia.com/advisories/18908 MISC:18913 URL:http://secunia.com/advisories/18913 MISC:19230 URL:http://secunia.com/advisories/19230 MISC:20060201-01-U URL:ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U MISC:DSA-931 URL:http://www.debian.org/security/2005/dsa-931 MISC:DSA-932 URL:http://www.debian.org/security/2005/dsa-932 MISC:DSA-936 URL:http://www.debian.org/security/2006/dsa-936 MISC:DSA-937 URL:http://www.debian.org/security/2005/dsa-937 MISC:DSA-938 URL:http://www.debian.org/security/2005/dsa-938 MISC:DSA-940 URL:http://www.debian.org/security/2005/dsa-940 MISC:DSA-950 URL:http://www.debian.org/security/2006/dsa-950 MISC:DSA-961 URL:http://www.debian.org/security/2006/dsa-961 MISC:DSA-962 URL:http://www.debian.org/security/2006/dsa-962 MISC:FLSA-2006:176751 URL:http://www.securityfocus.com/archive/1/427053/100/0/threaded MISC:FLSA:175404 URL:http://www.securityfocus.com/archive/1/427990/100/0/threaded MISC:MDKSA-2006:010 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:010~~ (Obsolete source) MISC:MDKSA-2006:011 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:011~~ (Obsolete source) MISC:MDKSA-2006:012 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2006:012~~ (Obsolete source) MISC:RHSA-2006:0160 URL:http://www.redhat.com/support/errata/RHSA-2006-0160.html MISC:SSA:2006-045-04 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 MISC:SSA:2006-045-09 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 MISC:SUSE-SA:2006:001 URL:http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html MISC:oval:org.mitre.oval:def:10287 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287
Assigning CNA
Red Hat, Inc.
Date Record Created
20051116	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20051116)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)

Use of the CVE® List and the associated references from this website are subject to the terms of use. CVE is sponsored by the U.S. Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA). Copyright © 1999–2024, The MITRE Corporation. CVE and the CVE logo are registered trademarks of The MITRE Corporation.