CVE-2005-3624: Conectiva Linux

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

Affected products

  • Conectiva Linux: version 10.0 only
  • Debian Debian Linux: version 3.0 only; version 3.1 only
  • Easy Software Products Cups: version 1.1.22 only; version 1.1.22_rc1 only; version 1.1.23 only; version 1.1.23_rc1 only
  • Gentoo Linux: any version
  • Kde Kdegraphics: version 3.2 only; version 3.4.3 only
  • Kde Koffice: version 1.4 only; version 1.4.1 only; version 1.4.2 only
  • Kde Kpdf: version 3.2 only; version 3.4.3 only
  • Kde Kword: version 1.4.2 only
  • Libextractor Libextractor: any version
  • Mandrakesoft Mandrake Linux: version 10.1 only; version 10.2 only; version 2006 only
  • Mandrakesoft Mandrake Linux Corporate Server: version 2.1 only; version 3.0 only
  • Poppler Poppler: version 0.4.2 only
  • Red Hat Enterprise Linux: version 2.1 only; version 3.0 only; version 4.0 only
  • Red Hat Enterprise Linux Desktop: version 3.0 only; version 4.0 only
  • Red Hat Fedora Core: version core_1.0 only; version core_2.0 only; version core_3.0 only; version core_4.0 only
  • Red Hat Linux: version 7.3 only; version 9.0 only
  • Red Hat Linux Advanced Workstation: version 2.1 only
  • Sco Openserver: version 5.0.7 only; version 6.0 only
  • Sgi Propack: version 3.0 only
  • Slackware Slackware Linux: version 9.0 only; version 9.1 only; version 10.0 only; version 10.1 only; version 10.2 only
  • Suse Suse Linux: version 1.0 only; version 9.0 only; version 9.1 only; version 9.2 only; version 9.3 only; version 10.0 only
  • Tetex Tetex: version 1.0.7 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 3.0 only
  • Trustix Secure Linux: version 2.0 only; version 2.2 only; version 3.0 only
  • Turbolinux Turbolinux: version 10 only; version fuji only
  • Turbolinux Turbolinux Appliance Server: version 1.0_hosting_edition only; version 1.0_workgroup_edition only
  • and 8 more

Published 2005-12-31. Last modified 2026-06-16.