Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2005-0988

security flaw

Race condition in gzip 1.2.4, 1.3.3, and earlier, when decompressing a gzipped file, allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by gzip after the decompression is complete.

CVSS 2.0 · 3.7 Low EPSS < 1% KEV · Not listed
Vendors
Freebsd Gentoo Gnu and 4 more
Products
Freebsd Linux Gzip and 10 more
CVE-2005-3624

security flaw

The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.

CVSS 2.0 · 5.0 Medium EPSS 2.3% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more
CVE-2005-3625

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

CVSS 2.0 · 10.0 Critical EPSS 3.8% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more
CVE-2005-3626

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

CVSS 2.0 · 5.0 Medium EPSS 3.4% KEV · Not listed
Vendors
Conectiva Debian Easy Software Products and 15 more
Products
Linux Debian Linux Cups and 30 more