PT-2005-1039 · Gnu+7 · Libextractor+9

Chris Evans

·

Publicado

2005-12-06

·

Atualizado

2018-10-19

·

CVE-2005-3626

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions kdegraphics versions prior to 3.4.3-r3 Xpdf (affected versions not specified) pdftohtml (affected versions not specified)
Description The issue affects various products, including gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, due to a problem in Xpdf. It allows attackers to cause a denial of service via a crafted FlateDecode stream that triggers a null dereference. Exploitation of the vulnerabilities can lead to disruption of confidentiality, integrity, and availability of protected information and can be carried out remotely.
Recommendations For kdegraphics versions prior to 3.4.3-r3, update to version 3.4.3-r3 or later. For Xpdf, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For pdftohtml, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-399CWE-119

Identificadores relacionados

BDU:2015-03279
BDU:2015-09484
CVE-2005-3626
DSA-931-1
DSA-932-1
DSA-936-1
DSA-937-1
DSA-938-1
DSA-940-1
DSA-950-1
DSA-961-1
DSA-962-1
DTSA-28-1
RHSA-2005:840
RHSA-2005:868
RHSA-2005_840
RHSA-2005_868
RHSA-2006:0160
RHSA-2006:0163
RHSA-2006:0177
RHSA-2006_0160
RHSA-2006_0163
RHSA-2006_0177

Produtos afetados

Cups
Red Hat
Xpdf
Gpdf
Kdegraphics
Kpdf
Libextractor
Pdftohtml
Poppler
Tetex