{"schemaVersion":3,"id":"CVE-2005-3628","aliases":["DEBIAN-CVE-2005-3628"],"status":"published","duplicateOf":null,"title":null,"description":"Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.","dates":{"published":"2006-01-23T22:00:00.000Z","modified":"2024-08-07T23:17:23.423Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":7.5,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":7.5,"severity":"high","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.04296,"percentile":0.91008,"severity":"low","asOf":"2026-10-18T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-18T00:00:00.000Z","baselineScore":0.04296},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04296,"percentile":0.91008}],"last30":[{"date":"2026-09-18T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.04296,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.04296,"percentile":0.91008}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[],"affected":[{"vendor":"debian","product":"cups","name":"cups","label":"cups","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/cups","purlType":"deb","versions":[{"text":"< 1.1.22-7","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 1.1.22-7","eol":null,"hubHref":null},{"vendor":"debian","product":"libextractor","name":"libextractor","label":"libextractor","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/libextractor","purlType":"deb","versions":[{"text":"< 0.5.9-1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.5.9-1","eol":null,"hubHref":null},{"vendor":"debian","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xpdf","purlType":"deb","versions":[{"text":"< 3.01-4","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.01-4","eol":null,"hubHref":null}],"affectedCount":3,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.debian.org/security/2005/dsa-932","label":"www.debian.org/security/2005/dsa-932","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/18147","label":"secunia.com/advisories/18147","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/18679","label":"secunia.com/advisories/18679","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2005/dsa-931","label":"www.debian.org/security/2005/dsa-931","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/19230","label":"secunia.com/advisories/19230","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:012","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:012","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.debian.org/security/2006/dsa-962","label":"www.debian.org/security/2006/dsa-962","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.debian.org/security/2005/dsa-937","label":"www.debian.org/security/2005/dsa-937","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/18398","label":"secunia.com/advisories/18398","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/427053/100/0/threaded","label":"www.securityfocus.com/archive/1/427053/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html","label":"lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html","hostname":"lists.suse.com","tags":["Vendor Advisory","X Refsource SUSE","Patch"]},{"url":"http://www.debian.org/security/2006/dsa-936","label":"www.debian.org/security/2006/dsa-936","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Patch"]},{"url":"http://secunia.com/advisories/18674","label":"secunia.com/advisories/18674","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/18436","label":"secunia.com/advisories/18436","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287","label":"oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287","hostname":"oval.cisecurity.org","tags":["VDB Entry","Signature","X Refsource OVAL"]},{"url":"http://secunia.com/advisories/18428","label":"secunia.com/advisories/18428","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/18380","label":"secunia.com/advisories/18380","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/18416","label":"secunia.com/advisories/18416","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18407","label":"secunia.com/advisories/18407","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18582","label":"secunia.com/advisories/18582","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://secunia.com/advisories/18534","label":"secunia.com/advisories/18534","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683","label":"slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683","hostname":"slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE"]},{"url":"http://secunia.com/advisories/18908","label":"secunia.com/advisories/18908","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.redhat.com/support/errata/RHSA-2006-0160.html","label":"www.redhat.com/support/errata/RHSA-2006-0160.html","hostname":"www.redhat.com","tags":["Vendor Advisory","X Refsource REDHAT","Patch"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:010","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:010","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRAKE"]},{"url":"http://www.debian.org/security/2005/dsa-940","label":"www.debian.org/security/2005/dsa-940","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/18389","label":"secunia.com/advisories/18389","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747","label":"slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747","hostname":"slackware.com","tags":["Vendor Advisory","X Refsource SLACKWARE"]},{"url":"http://www.securityfocus.com/archive/1/427990/100/0/threaded","label":"www.securityfocus.com/archive/1/427990/100/0/threaded","hostname":"www.securityfocus.com","tags":["Vendor Advisory","X Refsource FEDORA"]},{"url":"http://www.debian.org/security/2006/dsa-961","label":"www.debian.org/security/2006/dsa-961","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://secunia.com/advisories/18675","label":"secunia.com/advisories/18675","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://secunia.com/advisories/18913","label":"secunia.com/advisories/18913","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.debian.org/security/2005/dsa-938","label":"www.debian.org/security/2005/dsa-938","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN"]},{"url":"http://www.debian.org/security/2006/dsa-950","label":"www.debian.org/security/2006/dsa-950","hostname":"www.debian.org","tags":["Vendor Advisory","X Refsource DEBIAN","Patch"]},{"url":"http://secunia.com/advisories/18387","label":"secunia.com/advisories/18387","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2006:011","label":"www.mandriva.com/security/advisories?name=MDKSA-2006:011","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/18385","label":"secunia.com/advisories/18385","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Patch","Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2005-3628","label":"security-tracker.debian.org/tracker/CVE-2005-3628","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["DSA-931-1","DSA-932-1","DSA-936-1","DSA-937-1","DSA-938-1","DSA-940-1","DSA-950-1","DSA-961-1","DSA-962-1","DTSA-28-1","OPENSUSE-SU-2024:10707-1","RHSA-2005:840","RHSA-2005:867","RHSA-2005:868","RHSA-2005:878","RHSA-2006:0160"],"duplicates":[],"related":["OPENSUSE-SU-2024:10707-1"]},"timeline":[{"kind":"published","date":"2006-01-23T22:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T23:17:23.423Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":31,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T09:51:10.043Z","stale":false,"partial":false}}