KDE Kword vulnerabilities

3 vulnerabilities

Known vulnerabilities in KDE Kword, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2005-3624conectivalinux+31
EPSS score
2.30%
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.10CVE-2005-3625conectivalinux+31
EPSS score
3.82%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."5CVE-2005-3626conectivalinux+31
EPSS score
3.38%
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.