CVEvulnerability
CVE-2005-3192
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-12-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
Affected configurations
• xpdf xpdf 3.0.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.01pl1.patch Patch
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt ftp.sco.com
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt ftp.sco.com
- ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt ftp.sco.com
- ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U patches.sgi.com
- ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U patches.sgi.com
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289 bugs.debian.org
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html lists.suse.com
- http://rhn.redhat.com/errata/RHSA-2005-868.html Vendor Advisory
- http://scary.beasts.org/security/CESA-2005-003.txt scary.beasts.org
- http://secunia.com/advisories/17897/ Patch, Vendor Advisory
- http://secunia.com/advisories/17908 Vendor Advisory
- http://secunia.com/advisories/17912 Vendor Advisory
- http://secunia.com/advisories/17916 Vendor Advisory
- http://secunia.com/advisories/17920 Vendor Advisory
- http://secunia.com/advisories/17921 Vendor Advisory
- http://secunia.com/advisories/17926 Vendor Advisory
- http://secunia.com/advisories/17929 Vendor Advisory
- http://secunia.com/advisories/17940 Vendor Advisory
- http://secunia.com/advisories/17955 secunia.com
- http://secunia.com/advisories/17976 Vendor Advisory
- http://secunia.com/advisories/18009 Vendor Advisory
- http://secunia.com/advisories/18055 Vendor Advisory
- http://secunia.com/advisories/18061 Vendor Advisory
- http://secunia.com/advisories/18189 Vendor Advisory
- http://secunia.com/advisories/18191 Vendor Advisory
- http://secunia.com/advisories/18192 Vendor Advisory
- http://secunia.com/advisories/18303 secunia.com
- http://secunia.com/advisories/18313 Vendor Advisory
- http://secunia.com/advisories/18336 Vendor Advisory
- http://secunia.com/advisories/18349 Vendor Advisory
- http://secunia.com/advisories/18380 secunia.com
- http://secunia.com/advisories/18385 secunia.com
- http://secunia.com/advisories/18387 Vendor Advisory
- http://secunia.com/advisories/18389 Vendor Advisory
- http://secunia.com/advisories/18398 secunia.com
- http://secunia.com/advisories/18407 secunia.com
- http://secunia.com/advisories/18416 Vendor Advisory
- http://secunia.com/advisories/18428 secunia.com
- http://secunia.com/advisories/18436 secunia.com
- http://secunia.com/advisories/18448 Vendor Advisory
- http://secunia.com/advisories/18503 secunia.com
- http://secunia.com/advisories/18517 secunia.com
- http://secunia.com/advisories/18534 secunia.com
- http://secunia.com/advisories/18549 secunia.com
- http://secunia.com/advisories/18554 secunia.com
- http://secunia.com/advisories/18582 secunia.com
- http://secunia.com/advisories/18674 secunia.com
- http://secunia.com/advisories/18675 secunia.com
- http://secunia.com/advisories/18679 secunia.com
- http://secunia.com/advisories/18908 secunia.com
- http://secunia.com/advisories/18913 secunia.com
- http://secunia.com/advisories/19230 secunia.com
- http://secunia.com/advisories/19377 secunia.com
- http://secunia.com/advisories/19797 secunia.com
- http://secunia.com/advisories/19798 secunia.com
- http://secunia.com/advisories/25729 secunia.com
- http://secunia.com/advisories/26413 secunia.com
- http://securityreason.com/securityalert/235 securityreason.com
- http://securityreason.com/securityalert/240 securityreason.com
- http://securitytracker.com/id?1015309 securitytracker.com
- http://securitytracker.com/id?1015324 securitytracker.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 slackware.com
- http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 slackware.com
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 sunsolve.sun.com
- http://www.debian.org/security/2005/dsa-931 www.debian.org
- http://www.debian.org/security/2005/dsa-932 www.debian.org
- http://www.debian.org/security/2006/dsa-936 www.debian.org
- http://www.debian.org/security/2006/dsa-937 www.debian.org
- http://www.debian.org/security/2006/dsa-950 www.debian.org
- http://www.debian.org/security/2006/dsa-961 www.debian.org
- http://www.debian.org/security/2006/dsa-962 www.debian.org
- http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml www.gentoo.org
- http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml www.gentoo.org
- http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities Patch, Vendor Advisory
- http://www.kde.org/info/security/advisory-20051207-1.txt www.kde.org
- http://www.kde.org/info/security/advisory-20051207-2.txt www.kde.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:003 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:004 www.mandriva.com