Search for vulnerabilities
Vulnerability details: VCID-h5rg-by2f-aaaq
Vulnerability ID VCID-h5rg-by2f-aaaq
Aliases CVE-2005-3628
Summary Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
Status Published
Exploitability 0.5
Weighted Severity 8.0
Risk 4.0
Affected and Fixed Packages Package Details
Weaknesses (0)
There are no known CWE.
System Score Found at
rhas Important https://access.redhat.com/errata/RHSA-2005:840
rhas Important https://access.redhat.com/errata/RHSA-2005:867
rhas Important https://access.redhat.com/errata/RHSA-2005:868
rhas Important https://access.redhat.com/errata/RHSA-2005:878
rhas Moderate https://access.redhat.com/errata/RHSA-2006:0160
epss 0.01802 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02128 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02285 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02285 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02285 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.02683 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
epss 0.05308 https://api.first.org/data/v1/epss?cve=CVE-2005-3628
rhbs high https://bugzilla.redhat.com/show_bug.cgi?id=1617830
cvssv2 7.5 https://nvd.nist.gov/vuln/detail/CVE-2005-3628
Reference id Reference type URL
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3628.json
https://api.first.org/data/v1/epss?cve=CVE-2005-3628
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3628
http://secunia.com/advisories/18147
http://secunia.com/advisories/18380
http://secunia.com/advisories/18385
http://secunia.com/advisories/18387
http://secunia.com/advisories/18389
http://secunia.com/advisories/18398
http://secunia.com/advisories/18407
http://secunia.com/advisories/18416
http://secunia.com/advisories/18428
http://secunia.com/advisories/18436
http://secunia.com/advisories/18534
http://secunia.com/advisories/18582
http://secunia.com/advisories/18674
http://secunia.com/advisories/18675
http://secunia.com/advisories/18679
http://secunia.com/advisories/18908
http://secunia.com/advisories/18913
http://secunia.com/advisories/19230
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287
http://www.debian.org/security/2005/dsa-931
http://www.debian.org/security/2005/dsa-932
http://www.debian.org/security/2005/dsa-937
http://www.debian.org/security/2005/dsa-938
http://www.debian.org/security/2005/dsa-940
http://www.debian.org/security/2006/dsa-936
http://www.debian.org/security/2006/dsa-950
http://www.debian.org/security/2006/dsa-961
http://www.debian.org/security/2006/dsa-962
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
http://www.redhat.com/support/errata/RHSA-2006-0160.html
http://www.securityfocus.com/archive/1/427053/100/0/threaded
http://www.securityfocus.com/archive/1/427990/100/0/threaded
1617830 https://bugzilla.redhat.com/show_bug.cgi?id=1617830
342286 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342286
cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:* https://nvd.nist.gov/vuln/search/results?adv_search=true&isCpeNameSearch=true&query=cpe:2.3:a:xpdf:xpdf:*:*:*:*:*:*:*:*
CVE-2005-3628 https://nvd.nist.gov/vuln/detail/CVE-2005-3628
GLSA-200601-02 https://security.gentoo.org/glsa/200601-02
RHSA-2005:840 https://access.redhat.com/errata/RHSA-2005:840
RHSA-2005:867 https://access.redhat.com/errata/RHSA-2005:867
RHSA-2005:868 https://access.redhat.com/errata/RHSA-2005:868
RHSA-2005:878 https://access.redhat.com/errata/RHSA-2005:878
RHSA-2006:0160 https://access.redhat.com/errata/RHSA-2006:0160
No exploits are available.
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P Found at https://nvd.nist.gov/vuln/detail/CVE-2005-3628
Exploitability (E) Access Vector (AV) Access Complexity (AC) Authentication (Au) Confidentiality Impact (C) Integrity Impact (I) Availability Impact (A)

high

functional

unproven

proof_of_concept

not_defined

local

adjacent_network

network

high

medium

low

multiple

single

none

none

partial

complete

none

partial

complete

none

partial

complete
Exploit Prediction Scoring System (EPSS)
Percentile 0.87887
EPSS Score 0.01802
Published At Jan. 16, 2025, midnight
Date Actor Action Source VulnerableCode Version
There are no relevant records.