← Database

CVE-2005-3626

MEDIUM CVSS: 5.0 Published: 2005-12-31 Modified: 2026-06-16

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Affected Platforms

Poppler PopplerSlackware Slackware LinuxDebian Debian LinuxTetex TetexSgi PropackTurbolinux Turbolinux MultimediaTurbolinux Turbolinux WorkstationMandrakesoft Mandrake Linux Corporate ServerKde KdegraphicsGentoo Linux

Weakness Type

CWE-399

References