CVE ID:	CVE-2005-3628
Description:	Buffer overflow in the JBIG2Bitmap::JBIG2Bitmap function in JBIG2Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via unknown attack vectors.
Test IDs:	1.3.6.1.4.1.25623.1.0.56388   1.3.6.1.4.1.25623.1.0.56442   1.3.6.1.4.1.25623.1.0.56179   1.3.6.1.4.1.25623.1.0.56706
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-3628 18147 http://secunia.com/advisories/18147 18380 http://secunia.com/advisories/18380 18385 http://secunia.com/advisories/18385 18387 http://secunia.com/advisories/18387 18389 http://secunia.com/advisories/18389 18398 http://secunia.com/advisories/18398 18407 http://secunia.com/advisories/18407 18416 http://secunia.com/advisories/18416 18428 http://secunia.com/advisories/18428 18436 http://secunia.com/advisories/18436 18534 http://secunia.com/advisories/18534 18582 http://secunia.com/advisories/18582 18674 http://secunia.com/advisories/18674 18675 http://secunia.com/advisories/18675 18679 http://secunia.com/advisories/18679 18908 http://secunia.com/advisories/18908 18913 http://secunia.com/advisories/18913 19230 http://secunia.com/advisories/19230 20060201-01-U ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U DSA-931 http://www.debian.org/security/2005/dsa-931 DSA-932 http://www.debian.org/security/2005/dsa-932 DSA-936 http://www.debian.org/security/2006/dsa-936 DSA-937 http://www.debian.org/security/2005/dsa-937 DSA-938 http://www.debian.org/security/2005/dsa-938 DSA-940 http://www.debian.org/security/2005/dsa-940 DSA-950 http://www.debian.org/security/2006/dsa-950 DSA-961 http://www.debian.org/security/2006/dsa-961 DSA-962 http://www.debian.org/security/2006/dsa-962 FLSA-2006:176751 http://www.securityfocus.com/archive/1/427053/100/0/threaded FLSA:175404 http://www.securityfocus.com/archive/1/427990/100/0/threaded MDKSA-2006:010 http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 MDKSA-2006:011 http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 MDKSA-2006:012 http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 RHSA-2006:0160 http://www.redhat.com/support/errata/RHSA-2006-0160.html SSA:2006-045-04 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 SSA:2006-045-09 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 SUSE-SA:2006:001 http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html oval:org.mitre.oval:def:10287 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10287