Vulnerability in Xpdf

CVE-2005-3628

Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.

EPSS: 0.043 (90.1th percentile) — read the EPSS interpretation.

Affected products

  • Xpdf
  • N/a — versions n/a

References