GCVE - cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Kde (`d8ba08cf-7ec1-5504-a5b9-f8cfa50ca850`)
Product	Kpdf (`c4b88256-7d13-539d-ab0c-8528422be80f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2005-3626`	vulnerable	2026-06-08 04:48:41.422936	Details available Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference. Published: 2006-01-06T22:00:00.000Z Updated: 2024-08-07T23:17:23.446Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16143 http://www.debian.org/security/2005/dsa-932 http://secunia.com/advisories/18349 http://secunia.com/advisories/18147 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3625`	vulnerable	2026-06-08 04:48:41.418657	Details available Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins." Published: 2006-01-06T22:00:00.000Z Updated: 2024-08-07T23:17:23.366Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16143 http://www.debian.org/security/2005/dsa-932 http://secunia.com/advisories/18349 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575 http://secunia.com/advisories/18147	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3624`	vulnerable	2026-06-08 04:48:41.338886	Details available The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows. Published: 2006-01-06T22:00:00.000Z Updated: 2024-08-07T23:17:23.457Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/16143 http://www.debian.org/security/2005/dsa-932 http://secunia.com/advisories/18349 http://secunia.com/advisories/18147 ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-0206`	vulnerable	2026-06-08 04:48:11.815611	Details available The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux distributions such as Red Hat, which could leave Xpdf users exposed to the original vulnerabilities. Published: 2005-02-15T05:00:00.000Z Updated: 2024-08-07T21:05:25.397Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11107 http://www.mandriva.com/security/advisories?name=MDKSA-2005:041 http://www.securityfocus.com/bid/11501 http://www.redhat.com/support/errata/RHSA-2005-034.html http://www.mandriva.com/security/advisories?name=MDKSA-2005:056	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0889`	vulnerable	2026-06-08 04:47:51.771963	Details available Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identified by CVE-2004-0888. Published: 2004-10-26T04:00:00.000Z Updated: 2024-08-08T00:31:48.137Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/11501 http://www.mandriva.com/security/advisories?name=MDKSA-2004:113 http://www.gentoo.org/security/en/glsa/glsa-200410-20.xml http://www.gentoo.org/security/en/glsa/glsa-200410-30.xml https://exchange.xforce.ibmcloud.com/vulnerabilities/17819	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-0888`	vulnerable	2026-06-08 04:47:51.755157	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.