CVE-2005-3626

Exp

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference.

Published: 2005-12-31 Last update: 2026-04-16 Assigner: [email protected] Source: [email protected]

Conclusion & alert: CVE-2005-3626 is rated High Exploit Risk (67.3/100): CVSS Medium severity, with high exploitation likelihood (EPSS 9.17%, 93th percentile). Core evidence: 1 public exploit reference(s) are indexed (Exploit-DB). Mandatory action: Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Public exploit references (Exploit-DB) for CVE-2005-3626

EDB-ID Source Kind Published Link
nvd_ref exploit_tag Exploit-DB ↗

Exploit prediction scoring system (EPSS) score for CVE-2005-3626

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-05-13 9.33% 9.17% -0.16%
2 2025-12-28 9.17% 9.33% +0.16%
3 2025-12-27 9.17%

Full EPSS history (14 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2005-3626

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
10.0 2.9 [email protected]

Weakness enumeration for CVE-2005-3626

OS Trackers for CVE-2005-3626

vendor priority summary link
debian not yet assigned CVE-2005-3626 not yet assigned priority: Debian including 4 source packages (cups, libextractor, poppler, xpdf), 20 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 20. https://security-tracker.debian.org/tracker/CVE-2005-3626
gentoo normal CVE-2005-3626: 2 GLSA(s) (200601-02, 200601-17), 9 atom(s) (app-office/koffice, app-office/kword, …); latest impact normal. https://bugs.gentoo.org/buglist.cgi?quicksearch=CVE-2005-3626
redhat high https://access.redhat.com/security/cve/CVE-2005-3626
suse medium CVE-2005-3626 severity moderate: SUSE including 15 source package names (cups-2.4.11-160000.2.2, cups-client-2.4.11-160000.2.2, …), 15 product×package rows across 4 product lines (SUSE Linux Enterprise Module for Legacy 12, SUSE Linux Enterprise Server 16.0, SUSE Linux Micro 6.0, SUSE Linux Micro 6.1): Fixed 11, Known Not Affected 4. https://www.suse.com/security/cve/CVE-2005-3626/
ubuntu medium CVE-2005-3626 medium priority: Ubuntu including 3 source packages (gpdf, kdegraphics, koffice), 12 status rows across 4 suites (dapper, edgy, feisty, upstream): released 8, needs-triage 3, DNE 1. https://ubuntu.com/security/CVE-2005-3626

Vendor comments (NVD) for CVE-2005-3626

  • Red Hat (2007-03-14T00:00:00)

    Red Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.

Affected software / configurations for CVE-2005-3626

Vendor Product Version Raw CPE
easy_software_products cups 1.1.22 cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*
easy_software_products cups 1.1.22_rc1 cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*
easy_software_products cups 1.1.23 cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*
easy_software_products cups 1.1.23_rc1 cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*
kde kdegraphics 3.2 cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*
kde kdegraphics 3.4.3 cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*
kde koffice 1.4 cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*
kde koffice 1.4.1 cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*
kde koffice 1.4.2 cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*
kde kpdf 3.2 cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*
kde kpdf 3.4.3 cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*
kde kword 1.4.2 cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*
libextractor libextractor cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*
poppler poppler 0.4.2 cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*
sgi propack 3.0 cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*
tetex tetex 1.0.7 cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*
tetex tetex 2.0 cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*
tetex tetex 2.0.1 cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*
tetex tetex 2.0.2 cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*
tetex tetex 3.0 cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*
xpdf xpdf 3.0 cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*
conectiva linux 10.0 cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
debian debian_linux 3.0 cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:ia-64:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:m68k:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:mips:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:mipsel:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:ppc:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:s-390:*:*:*:*:*
debian debian_linux 3.1 cpe:2.3:o:debian:debian_linux:3.1:*:sparc:*:*:*:*:*
gentoo linux cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake_linux 10.1 cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:*:*:*:*:*:*
mandrakesoft mandrake_linux 10.1 cpe:2.3:o:mandrakesoft:mandrake_linux:10.1:*:x86-64:*:*:*:*:*
mandrakesoft mandrake_linux 10.2 cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:*:*:*:*:*:*
mandrakesoft mandrake_linux 10.2 cpe:2.3:o:mandrakesoft:mandrake_linux:10.2:*:x86-64:*:*:*:*:*
mandrakesoft mandrake_linux 2006 cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:*:*:*:*:*:*
mandrakesoft mandrake_linux 2006 cpe:2.3:o:mandrakesoft:mandrake_linux:2006:*:x86-64:*:*:*:*:*
mandrakesoft mandrake_linux_corporate_server 2.1 cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:*:*:*:*:*:*
mandrakesoft mandrake_linux_corporate_server 2.1 cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:2.1:*:x86_64:*:*:*:*:*
mandrakesoft mandrake_linux_corporate_server 3.0 cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:*:*:*:*:*:*
mandrakesoft mandrake_linux_corporate_server 3.0 cpe:2.3:o:mandrakesoft:mandrake_linux_corporate_server:3.0:*:x86_64:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:advanced_server_ia64:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:enterprise_server_ia64:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation:*:*:*:*:*
redhat enterprise_linux 2.1 cpe:2.3:o:redhat:enterprise_linux:2.1:*:workstation_ia64:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:advanced_server:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:enterprise_server:*:*:*:*:*
redhat enterprise_linux 3.0 cpe:2.3:o:redhat:enterprise_linux:3.0:*:workstation_server:*:*:*:*:*
redhat enterprise_linux 4.0 cpe:2.3:o:redhat:enterprise_linux:4.0:*:advanced_server:*:*:*:*:*
redhat enterprise_linux 4.0 cpe:2.3:o:redhat:enterprise_linux:4.0:*:enterprise_server:*:*:*:*:*
redhat enterprise_linux 4.0 cpe:2.3:o:redhat:enterprise_linux:4.0:*:workstation:*:*:*:*:*
redhat enterprise_linux_desktop 3.0 cpe:2.3:o:redhat:enterprise_linux_desktop:3.0:*:*:*:*:*:*:*
redhat enterprise_linux_desktop 4.0 cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:*:*:*:*:*:*:*
redhat fedora_core core_1.0 cpe:2.3:o:redhat:fedora_core:core_1.0:*:*:*:*:*:*:*
redhat fedora_core core_2.0 cpe:2.3:o:redhat:fedora_core:core_2.0:*:*:*:*:*:*:*
redhat fedora_core core_3.0 cpe:2.3:o:redhat:fedora_core:core_3.0:*:*:*:*:*:*:*
redhat fedora_core core_4.0 cpe:2.3:o:redhat:fedora_core:core_4.0:*:*:*:*:*:*:*
redhat linux 7.3 cpe:2.3:o:redhat:linux:7.3:*:i386:*:*:*:*:*
redhat linux 9.0 cpe:2.3:o:redhat:linux:9.0:*:i386:*:*:*:*:*
redhat linux_advanced_workstation 2.1 cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:ia64:*:*:*:*:*
redhat linux_advanced_workstation 2.1 cpe:2.3:o:redhat:linux_advanced_workstation:2.1:*:itanium:*:*:*:*:*

References for CVE-2005-3626

URL Tags
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html Patch Vendor Advisory
http://rhn.redhat.com/errata/RHSA-2006-0177.html Patch Vendor Advisory
http://scary.beasts.org/security/CESA-2005-003.txt Exploit
http://secunia.com/advisories/18147
http://secunia.com/advisories/18303 Vendor Advisory
http://secunia.com/advisories/18312 Patch Vendor Advisory
http://secunia.com/advisories/18313 Patch Vendor Advisory
http://secunia.com/advisories/18329 Vendor Advisory
http://secunia.com/advisories/18332 Vendor Advisory
http://secunia.com/advisories/18334 Patch Vendor Advisory
http://secunia.com/advisories/18335 Patch Vendor Advisory
http://secunia.com/advisories/18338 Patch Vendor Advisory
http://secunia.com/advisories/18349 Patch Vendor Advisory
http://secunia.com/advisories/18373
http://secunia.com/advisories/18375 Vendor Advisory
http://secunia.com/advisories/18380
http://secunia.com/advisories/18385 Patch Vendor Advisory
http://secunia.com/advisories/18387 Patch Vendor Advisory
http://secunia.com/advisories/18389 Patch Vendor Advisory
http://secunia.com/advisories/18398 Patch Vendor Advisory
http://secunia.com/advisories/18407 Patch Vendor Advisory
http://secunia.com/advisories/18414
http://secunia.com/advisories/18416 Patch Vendor Advisory
http://secunia.com/advisories/18423 Patch Vendor Advisory
http://secunia.com/advisories/18425
http://secunia.com/advisories/18428
http://secunia.com/advisories/18436
http://secunia.com/advisories/18448 Patch Vendor Advisory
http://secunia.com/advisories/18463
http://secunia.com/advisories/18517 Patch Vendor Advisory
http://secunia.com/advisories/18534 Patch Vendor Advisory
http://secunia.com/advisories/18554 Patch Vendor Advisory
http://secunia.com/advisories/18582 Patch Vendor Advisory
http://secunia.com/advisories/18642 Vendor Advisory
http://secunia.com/advisories/18644 Vendor Advisory
http://secunia.com/advisories/18674 Vendor Advisory
http://secunia.com/advisories/18675 Vendor Advisory
http://secunia.com/advisories/18679 Vendor Advisory
http://secunia.com/advisories/18908
http://secunia.com/advisories/18913
http://secunia.com/advisories/19230
http://secunia.com/advisories/19377
http://secunia.com/advisories/25729
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
http://www.debian.org/security/2005/dsa-931
http://www.debian.org/security/2005/dsa-932
http://www.debian.org/security/2005/dsa-937
http://www.debian.org/security/2005/dsa-938
http://www.debian.org/security/2005/dsa-940
http://www.debian.org/security/2006/dsa-936 Patch Vendor Advisory
http://www.debian.org/security/2006/dsa-950 Patch Vendor Advisory
http://www.debian.org/security/2006/dsa-961 Patch Vendor Advisory
http://www.debian.org/security/2006/dsa-962
http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml Patch Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
http://www.kde.org/info/security/advisory-20051207-2.txt Patch Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html Patch
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html Patch
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
http://www.redhat.com/support/errata/RHSA-2006-0160.html Patch Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2006-0163.html
http://www.securityfocus.com/archive/1/427053/100/0/threaded
http://www.securityfocus.com/archive/1/427990/100/0/threaded
http://www.securityfocus.com/bid/16143 Patch
http://www.trustix.org/errata/2006/0002/
http://www.vupen.com/english/advisories/2006/0047
http://www.vupen.com/english/advisories/2007/2280
https://exchange.xforce.ibmcloud.com/vulnerabilities/24026
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9992
https://usn.ubuntu.com/236-1/
cvelogic Threat Intelligence