CVEvulnerability

CVE-2005-3191

5.1 MEDIUM Published 2005-12-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.

Affected configurations

• xpdf xpdf 0.90 • xpdf xpdf 0.91 • xpdf xpdf 0.92 • xpdf xpdf 0.93 • xpdf xpdf 1.0 • xpdf xpdf 1.0a • xpdf xpdf 1.1 • xpdf xpdf 2.0 • xpdf xpdf 2.1 • xpdf xpdf 2.2 • xpdf xpdf 2.3 • xpdf xpdf 3.0 • xpdf xpdf 3.0.1 • xpdf xpdf 3.0 pl2 • xpdf xpdf 3.0 pl3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References