RSS   Vulnerabilities for 'Turbolinux multimedia'   RSS

2005-12-31
 
CVE-2005-3626

CWE-399
 
 
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

 
 
CVE-2005-3625

CWE-399
 
 
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

 
 
CVE-2005-3624

CWE-189
 
 
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

 

 >>> Vendor: Turbolinux 9 Products
Turbolinux
Turbolinux advanced server
Turbolinux server
Turbolinux workstation
Turbolinux desktop
Turbolinux home
Turbolinux appliance server
Turbolinux multimedia
Turbolinux personal

Copyright 2024, cxsecurity.com

 

Back to Top