Approved changes feed: RSS · Atom

cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorLibextractor (1dce38f4-4a41-5ca5-9ea0-1c35de70606b)
ProductLibextractor (3c376f4f-c526-5e55-9521-7834ad5a0db8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libextractor purl2cpe 2026-06-01 10:15:24.494883
pkg:deb/ubuntu/libextractor purl2cpe 2026-06-01 10:15:24.494886
pkg:github/ndurner/libextractor purl2cpe 2026-06-01 10:15:24.494888
pkg:gnu/libextractor purl2cpe 2026-06-01 10:15:24.494890
pkg:rpm/fedora/libextractor purl2cpe 2026-06-01 10:15:24.494891
pkg:rpm/opensuse/libextractor purl2cpe 2026-06-01 10:15:24.494893

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3626 vulnerable 2026-06-08 04:48:41.422987 Details available
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3625 vulnerable 2026-06-08 04:48:41.418710 Details available
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-3624 vulnerable 2026-06-08 04:48:41.341115 Details available
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows.
Published: 2006-01-06T22:00:00.000Z
Updated: 2024-08-07T23:17:23.457Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.