Read the docs
TI-2005-03420 Aliases CVE-2005-3624GHSA-rj76-p6p4-3fm5

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml…

Priority LOW 27CWE-189Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · Partial · None
Fix status
Fixed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat.

Summary

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Why it matters now

EPSS 0.02301 83rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed Red Hat: 5 advisories

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 127

CPEVersionsRoleVendor
cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*1.1.22VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*1.1.22_rc1VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*1.1.23VulnerableEasy Software Products
cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*1.1.23_rc1VulnerableEasy Software Products
cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*3.2VulnerableKDE
cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableKDE
cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*1.4VulnerableKDE
cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*1.4.1VulnerableKDE
cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableKDE
cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*3.2VulnerableKDE
  • cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:* Versions 1.1.22 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:* Versions 1.1.22_rc1 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:* Versions 1.1.23 Vulnerable ·Easy Software Products
  • cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:* Versions 1.1.23_rc1 Vulnerable ·Easy Software Products
  • cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·KDE
  • cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·KDE
  • cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·KDE
  • cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:* Versions 1.4.1 Vulnerable ·KDE
  • cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·KDE
  • cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·KDE
Show 117 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*3.4.3VulnerableKDE
cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*1.4.2VulnerableKDE
cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*all versionsVulnerableLibextractor
cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*0.4.2Vulnerablepoppler
cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*3.0 sp6VulnerableSgi
cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*1.0.7VulnerableTetex
cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*2.0VulnerableTetex
cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*2.0.1VulnerableTetex
cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*2.0.2VulnerableTetex
cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*3.0VulnerableTetex
cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*3.0VulnerableXpdf
cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*10.0VulnerableConectiva
cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*3.0VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*3.1VulnerableDebian
cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*all versionsVulnerablegentoo
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*10.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*10.2VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:*10.2VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*2006VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*2006VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*2.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*2.1VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*3.0VulnerableMandrakesoft
cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*3.0VulnerableMandrakesoft
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*3.0VulnerableRed Hat
cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*core_1.0VulnerableRed Hat
cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*core_2.0VulnerableRed Hat
cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*core_3.0VulnerableRed Hat
cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*core_4.0VulnerableRed Hat
cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*7.3VulnerableRed Hat
cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*9.0VulnerableRed Hat
cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*2.1VulnerableRed Hat
cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:*5.0.7VulnerableSco
cpe:2.3:o:sco:openserver:6.0:*:*:*:*:*:*:*6.0VulnerableSco
cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:*9.0VulnerableSlackware
cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:*9.1VulnerableSlackware
cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:*10.0VulnerableSlackware
cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:*10.1VulnerableSlackware
cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:*10.2VulnerableSlackware
cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:*1.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:s_390:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:*9.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:*9.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:*9.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:*9.1VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:*9.2VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:*9.2VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:*9.2VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:*9.3VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:*9.3VulnerableSUSE
cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:*9.3VulnerableSUSE
cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:*10.0VulnerableSUSE
cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:*10.0VulnerableSUSE
cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:*2.0VulnerableTrustix
cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:*2.2VulnerableTrustix
cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:*3.0VulnerableTrustix
cpe:2.3:o:turbolinux:turbolinux:10:*:*:*:*:*:*:*10VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux:fuji:*:*:*:*:*:*:*fujiVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting_edition:*:*:*:*:*:*:*1.0_hosting_editionVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup_edition:*:*:*:*:*:*:*1.0_workgroup_editionVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:*10.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:*all versionsVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_multimedia:*:*:*:*:*:*:*:*all versionsVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_personal:*:*:*:*:*:*:*:*all versionsVulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:*8.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:*10.0VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_server:10.0_x86:*:*:*:*:*:*:*10.0_x86VulnerableTurbolinux
cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:*8.0VulnerableTurbolinux
cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:*4.1VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:*4.1VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:*5.04VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:*5.04VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:*5.04VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:*5.10VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:*5.10VulnerableUbuntu
cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:*5.10VulnerableUbuntu
  • cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:* Versions 3.4.3 Vulnerable ·KDE
  • cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:* Versions 1.4.2 Vulnerable ·KDE
  • cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Libextractor
  • cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:* Versions 0.4.2 Vulnerable ·poppler
  • cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:* Versions 3.0 sp6 Vulnerable ·Sgi
  • cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:* Versions 1.0.7 Vulnerable ·Tetex
  • cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Tetex
  • cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:* Versions 2.0.1 Vulnerable ·Tetex
  • cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:* Versions 2.0.2 Vulnerable ·Tetex
  • cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Tetex
  • cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Xpdf
  • cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Conectiva
  • cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:* Versions 3.0 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:* Versions 3.1 Vulnerable ·Debian
  • cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·gentoo
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:* Versions 10.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:* Versions 10.2 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:* Versions 2006 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:* Versions 2006 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:* Versions 2.1 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:* Versions 3.0 Vulnerable ·Mandrakesoft
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:* Versions core_1.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:* Versions core_2.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:* Versions core_3.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:* Versions core_4.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:* Versions 7.3 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:* Versions 9.0 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:* Versions 2.1 Vulnerable ·Red Hat
  • cpe:2.3:o:sco:openserver:5.0.7:*:*:*:*:*:*:* Versions 5.0.7 Vulnerable ·Sco
  • cpe:2.3:o:sco:openserver:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Sco
  • cpe:2.3:o:slackware:slackware_linux:9.0:*:*:*:*:*:*:* Versions 9.0 Vulnerable ·Slackware
  • cpe:2.3:o:slackware:slackware_linux:9.1:*:*:*:*:*:*:* Versions 9.1 Vulnerable ·Slackware
  • cpe:2.3:o:slackware:slackware_linux:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Slackware
  • cpe:2.3:o:slackware:slackware_linux:10.1:*:*:*:*:*:*:* Versions 10.1 Vulnerable ·Slackware
  • cpe:2.3:o:slackware:slackware_linux:10.2:*:*:*:*:*:*:* Versions 10.2 Vulnerable ·Slackware
  • cpe:2.3:o:suse:suse_linux:1.0:*:*:*:*:*:*:* Versions 1.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:enterprise_server:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:personal:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:professional:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:s_390:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.0:*:x86_64:*:*:*:*:* Versions 9.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.1:*:personal:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.1:*:professional:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.1:*:x86_64:*:*:*:*:* Versions 9.1 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.2:*:personal:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.2:*:professional:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.2:*:x86_64:*:*:*:*:* Versions 9.2 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.3:*:personal:*:*:*:*:* Versions 9.3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.3:*:professional:*:*:*:*:* Versions 9.3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:9.3:*:x86_64:*:*:*:*:* Versions 9.3 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:10.0:*:oss:*:*:*:*:* Versions 10.0 Vulnerable ·SUSE
  • cpe:2.3:o:suse:suse_linux:10.0:*:professional:*:*:*:*:* Versions 10.0 Vulnerable ·SUSE
  • cpe:2.3:o:trustix:secure_linux:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Trustix
  • cpe:2.3:o:trustix:secure_linux:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Trustix
  • cpe:2.3:o:trustix:secure_linux:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Trustix
  • cpe:2.3:o:turbolinux:turbolinux:10:*:*:*:*:*:*:* Versions 10 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux:fuji:*:*:*:*:*:*:* Versions fuji Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_hosting_edition:*:*:*:*:*:*:* Versions 1.0_hosting_edition Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_appliance_server:1.0_workgroup_edition:*:*:*:*:*:*:* Versions 1.0_workgroup_edition Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_desktop:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_home:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_multimedia:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_personal:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_server:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_server:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_server:10.0_x86:*:*:*:*:*:*:* Versions 10.0_x86 Vulnerable ·Turbolinux
  • cpe:2.3:o:turbolinux:turbolinux_workstation:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Turbolinux
  • cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ia64:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:4.1:*:ppc:*:*:*:*:* Versions 4.1 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:amd64:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:i386:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.04:*:powerpc:*:*:*:*:* Versions 5.04 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:amd64:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:i386:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu
  • cpe:2.3:o:ubuntu:ubuntu_linux:5.10:*:powerpc:*:*:*:*:* Versions 5.10 Vulnerable ·Ubuntu

Remediation

Red Hat 5 advisories

  • RHSA-2006:0160 Released 2006-01-19 · Red Hat rating Moderate
    tetex security update
    • Red Hat Desktop version 3 tetex-1.0.7-67.9, tetex-1.0.7-67.9.i386, tetex-afm-1.0.7-67.9 +9
    • Red Hat Enterprise Linux AS version 3 tetex-1.0.7-67.9, tetex-1.0.7-67.9.i386, tetex-1.0.7-67.9.ia64 +21
    • Red Hat Enterprise Linux AS version 4 tetex-2.0.2-22.EL4.7, tetex-2.0.2-22.EL4.7.i386, tetex-2.0.2-22.EL4.7.ia64 +25
    • Red Hat Enterprise Linux Desktop version 4 tetex-2.0.2-22.EL4.7, tetex-2.0.2-22.EL4.7.i386, tetex-afm-2.0.2-22.EL4.7 +11
    • Red Hat Enterprise Linux ES version 3 tetex-1.0.7-67.9, tetex-1.0.7-67.9.i386, tetex-1.0.7-67.9.ia64 +15
    • Red Hat Enterprise Linux ES version 4 tetex-2.0.2-22.EL4.7, tetex-2.0.2-22.EL4.7.i386, tetex-2.0.2-22.EL4.7.ia64 +18
    • Red Hat Enterprise Linux WS version 3 tetex-1.0.7-67.9, tetex-1.0.7-67.9.i386, tetex-1.0.7-67.9.ia64 +15
    • Red Hat Enterprise Linux WS version 4 tetex-2.0.2-22.EL4.7, tetex-2.0.2-22.EL4.7.i386, tetex-2.0.2-22.EL4.7.ia64 +18
  • RHSA-2006:0177 Released 2006-01-11 · Red Hat rating Important
    gpdf security update
    • Red Hat Enterprise Linux AS version 4 gpdf-2.8.2-7.4, gpdf-2.8.2-7.4.i386, gpdf-2.8.2-7.4.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 gpdf-2.8.2-7.4, gpdf-2.8.2-7.4.i386
    • Red Hat Enterprise Linux ES version 4 gpdf-2.8.2-7.4, gpdf-2.8.2-7.4.i386, gpdf-2.8.2-7.4.ia64
    • Red Hat Enterprise Linux WS version 4 gpdf-2.8.2-7.4, gpdf-2.8.2-7.4.i386, gpdf-2.8.2-7.4.ia64
  • RHSA-2006:0163 Released 2006-01-11 · Red Hat rating Important
    cups security update
    • Red Hat Desktop version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-devel-1:1.1.17-13.3.36 +3
    • Red Hat Enterprise Linux AS version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +9
    • Red Hat Enterprise Linux AS version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +9
    • Red Hat Enterprise Linux Desktop version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-devel-1:1.1.22-0.rc1.9.10 +3
    • Red Hat Enterprise Linux ES version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +6
    • Red Hat Enterprise Linux ES version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +6
    • Red Hat Enterprise Linux WS version 3 cups-1:1.1.17-13.3.36, cups-1:1.1.17-13.3.36.i386, cups-1:1.1.17-13.3.36.ia64 +6
    • Red Hat Enterprise Linux WS version 4 cups-1:1.1.22-0.rc1.9.10, cups-1:1.1.22-0.rc1.9.10.i386, cups-1:1.1.22-0.rc1.9.10.ia64 +6
Show 2 more Red Hat advisories
  • RHSA-2005:868 Released 2005-12-20 · Red Hat rating Important
    kdegraphics security update
    • Red Hat Enterprise Linux AS version 4 kdegraphics-7:3.3.1-3.6, kdegraphics-7:3.3.1-3.6.i386, kdegraphics-7:3.3.1-3.6.ia64 +5
    • Red Hat Enterprise Linux Desktop version 4 kdegraphics-7:3.3.1-3.6, kdegraphics-7:3.3.1-3.6.i386, kdegraphics-devel-7:3.3.1-3.6 +1
    • Red Hat Enterprise Linux ES version 4 kdegraphics-7:3.3.1-3.6, kdegraphics-7:3.3.1-3.6.i386, kdegraphics-7:3.3.1-3.6.ia64 +3
    • Red Hat Enterprise Linux WS version 4 kdegraphics-7:3.3.1-3.6, kdegraphics-7:3.3.1-3.6.i386, kdegraphics-7:3.3.1-3.6.ia64 +3
  • RHSA-2005:840 Released 2005-12-06 · Red Hat rating Important
    xpdf security update
    • Red Hat Desktop version 3 xpdf-1:2.02-9.8, xpdf-1:2.02-9.8.i386
    • Red Hat Enterprise Linux AS version 3 xpdf-1:2.02-9.8, xpdf-1:2.02-9.8.i386, xpdf-1:2.02-9.8.ia64 +1
    • Red Hat Enterprise Linux AS version 4 xpdf-1:3.00-11.10, xpdf-1:3.00-11.10.i386, xpdf-1:3.00-11.10.ia64 +1
    • Red Hat Enterprise Linux Desktop version 4 xpdf-1:3.00-11.10, xpdf-1:3.00-11.10.i386
    • Red Hat Enterprise Linux ES version 3 xpdf-1:2.02-9.8, xpdf-1:2.02-9.8.i386, xpdf-1:2.02-9.8.ia64
    • Red Hat Enterprise Linux ES version 4 xpdf-1:3.00-11.10, xpdf-1:3.00-11.10.i386, xpdf-1:3.00-11.10.ia64
    • Red Hat Enterprise Linux WS version 3 xpdf-1:2.02-9.8, xpdf-1:2.02-9.8.i386, xpdf-1:2.02-9.8.ia64
    • Red Hat Enterprise Linux WS version 4 xpdf-1:3.00-11.10, xpdf-1:3.00-11.10.i386, xpdf-1:3.00-11.10.ia64

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Desktop version 3Fixed RHSA-2005:840, RHSA-2006:0160, RHSA-2006:0163
Red Hat Enterprise Linux AS version 3Fixed RHSA-2005:840, RHSA-2006:0160, RHSA-2006:0163
Red Hat Enterprise Linux AS version 4Fixed RHSA-2005:840, RHSA-2005:868, RHSA-2006:0160, RHSA-2006:0163, RHSA-2006:0177
Red Hat Enterprise Linux Desktop version 4Fixed RHSA-2005:840, RHSA-2005:868, RHSA-2006:0160, RHSA-2006:0163, RHSA-2006:0177
Red Hat Enterprise Linux ES version 3Fixed RHSA-2005:840, RHSA-2006:0160, RHSA-2006:0163
Red Hat Enterprise Linux ES version 4Fixed RHSA-2005:840, RHSA-2005:868, RHSA-2006:0160, RHSA-2006:0163, RHSA-2006:0177
Red Hat Enterprise Linux WS version 3Fixed RHSA-2005:840, RHSA-2006:0160, RHSA-2006:0163
Red Hat Enterprise Linux WS version 4Fixed RHSA-2005:840, RHSA-2005:868, RHSA-2006:0160, RHSA-2006:0163, RHSA-2006:0177

Timeline

  1. 2026-10-02 Threatist record created from CVE-2005-3624
  2. 2026-10-03 Alias added: GHSA-rj76-p6p4-3fm5

References

Exploit 1

Patch 10

Advisory 21

Other 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences