CVE-2005-3624: conectiva linux Numeric Errors

CVSS: 5.0v2.0MediumModified

AliasesDEBIAN-CVE-2005-3624

Published 06-01-2006Last modified 07-08-2024

Some data may be incomplete

4 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-3624 is a medium (CVSS 5.0) Numeric Errors vulnerability in conectiva linux. EPSS estimates a 2.30% chance of exploitation in the next 30 days, higher than 83% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk

30/100

0100

Medium · default modelHow is this calculated?

CVSS score

5.0/10

010

Medium · v2.0 (NVD)

EPSS score

2.30%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits1reference

Advisory lineage

Upstream 0 · Downstream 16 · Related 1

DSA-931-1 DSA-932-1 DSA-936-1 DSA-937-1 DSA-938-1 DSA-940-1+10 more

Timeline

06-01-2006
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

CVSS metrics

1 score · 1 source · 1 version

v2.05.0

EPSS trend

Probability

2.30%

Chance of exploitation in the next 30 days

Percentile

83%

Versus all other CVEs

30-day change

0.00 pp

From 2.30% on 18-09-2026

18-09-202618-10-2026

EPSS score

2.30%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found

referenceUnverified
Exploit Reference (scary.beasts.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-189Numeric ErrorsWeaknesses in this category are related to improper calculation or conversion of numbers.

Affected systems

Debian5 products

cups< 1.1.22-7
libextractor< 0.5.9-1
poppler< 0.4.4-1
xpdf< 3.01-4
debian_linuxEOL3.0 | 3.1

Redhat5 products

enterprise_linuxEOL2.1 | 3.0 | 4.0
enterprise_linux_desktop3.0 | 4.0
fedora_corecore_1.0 | core_2.0 | core_3.0 | core_4.0
linux7.3 | 9.0
linux_advanced_workstation2.1

Turbolinux5 products

turbolinux10 | fuji
turbolinux_appliance_server1.0_hosting_edition | 1.0_workgroup_edition
turbolinux_desktop10.0
turbolinux_server8.0 | 10.0 | 10.0_x86
turbolinux_workstation8.0

Kde4 products

kdegraphics3.2 | 3.4.3
koffice1.4 | 1.4.1 | 1.4.2
kpdf3.2 | 3.4.3
kword1.4.2

Mandrakesoft2 products

mandrake_linux10.1 | 10.2 | 2006
mandrake_linux_corporate_server2.1 | 3.0

Conectiva1 product

linux10.0

Easy_software_products1 product

cups1.1.22 | 1.1.22_rc1 | 1.1.23 | 1.1.23_rc1

Poppler1 product

poppler0.4.2

Sco1 product

openserver5.0.7 | 6.0

Sgi1 product

propack3.0:sp6

Slackware1 product

slackware_linuxEOL9.0 | 9.1 | 10.0 | 10.1 | 10.2

Suse1 product

suse_linux1.0 | 9.0 | 9.1 | 9.2 | 9.3 | 10.0

Tetex1 product

tetex1.0.7 | 2.0 | 2.0.1 | 2.0.2 | 3.0

Trustix1 product

secure_linux2.0 | 2.2 | 3.0

Ubuntu1 product

ubuntu_linux4.1 | 5.04 | 5.10

Xpdf1 product

xpdf3.0

16 vendors · 32 products

References

79 links

www.securityfocus.com/bid/16143VDB EntryX Refsource BIDPatch
www.debian.org/security/2005/dsa-932Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18349Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18147Third Party AdvisoryX Refsource SECUNIA
scary.beasts.org/security/CESA-2005-003.txtX Refsource MISCExploitVendor Advisory
www.kde.org/info/security/advisory-20051207-2.txtX Refsource CONFIRMPatchVendor Advisory
secunia.com/advisories/18679Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18312Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18644Third Party AdvisoryX Refsource SECUNIAVendor Advisory
usn.ubuntu.com/236-1/Vendor AdvisoryX Refsource UBUNTU

Show all 79 references

secunia.com/advisories/18425Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18373Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18303Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.debian.org/security/2005/dsa-931Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18554Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:003Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/19230Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1Vendor AdvisoryX Refsource SUNALERT
www.mandriva.com/security/advisories?name=MDKSA-2006:012Vendor AdvisoryX Refsource MANDRIVA
www.debian.org/security/2006/dsa-962Vendor AdvisoryX Refsource DEBIANPatch
www.redhat.com/support/errata/RHSA-2006-0163.htmlVendor AdvisoryX Refsource REDHAT
www.debian.org/security/2005/dsa-937Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18398Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.securityfocus.com/archive/1/427053/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.trustix.org/errata/2006/0002/Vendor AdvisoryX Refsource TRUSTIX
lists.suse.com/archive/suse-security-announce/2006-Jan/0001.htmlVendor AdvisoryX Refsource SUSEPatch
www.debian.org/security/2006/dsa-936Vendor AdvisoryX Refsource DEBIANPatch
www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/18329Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18463Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18642Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18674Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:005Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/18313Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18448Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18436Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18428Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18380Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18423Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18416Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
rhn.redhat.com/errata/RHSA-2006-0177.htmlVendor AdvisoryX Refsource REDHATPatch
www.vupen.com/english/advisories/2007/2280VDB EntryX Refsource VUPEN
www.gentoo.org/security/en/glsa/glsa-200601-02.xmlVendor AdvisoryX Refsource GENTOOPatch
secunia.com/advisories/18407Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18332Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18517Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18582Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
secunia.com/advisories/18534Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683Vendor AdvisoryX Refsource SLACKWARE
secunia.com/advisories/18908Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25729Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18414Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:006Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/18338Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:008Vendor AdvisoryX Refsource MANDRIVA
www.redhat.com/support/errata/RHSA-2006-0160.htmlVendor AdvisoryX Refsource REDHATPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:010Vendor AdvisoryX Refsource MANDRAKE
www.debian.org/security/2005/dsa-940Vendor AdvisoryX Refsource DEBIAN
www.mandriva.com/security/advisories?name=MDKSA-2006:004Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2006/0047VDB EntryX Refsource VUPEN
www.gentoo.org/security/en/glsa/glsa-200601-17.xmlVendor AdvisoryX Refsource GENTOOPatch
exchange.xforce.ibmcloud.com/vulnerabilities/24022VDB EntryX Refsource XF
secunia.com/advisories/18389Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9437VDB EntrySignatureX Refsource OVAL
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747Vendor AdvisoryX Refsource SLACKWARE
secunia.com/advisories/19377Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/427990/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.debian.org/security/2006/dsa-961Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/18675Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18913Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2005/dsa-938Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18334Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18375Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-950Vendor AdvisoryX Refsource DEBIANPatch
secunia.com/advisories/18387Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:011Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/18385Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory
security-tracker.debian.org/tracker/CVE-2005-3624Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities