Kde Kword vulnerabilities

3 CVEs affecting Kde Kword, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-3626, published 2005-12-31.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2005-3625, published 2005-12-31. High severity, CVSS 10.0. EPSS: 3.8% chance of exploitation in the next 30 days. Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end…
CVE-2005-3626, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days. Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that…
CVE-2005-3624, published 2005-12-31. Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days. The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large…