CVEvulnerability

CVE-2005-3193

5.1 MEDIUM Published 2005-12-07 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-07
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

Affected configurations

• xpdf xpdf 0.90 • xpdf xpdf 0.91 • xpdf xpdf 0.92 • xpdf xpdf 0.93 • xpdf xpdf 1.0 • xpdf xpdf 1.0a • xpdf xpdf 1.1 • xpdf xpdf 2.0 • xpdf xpdf 2.1 • xpdf xpdf 2.2 • xpdf xpdf 2.3 • xpdf xpdf 3.0 • xpdf xpdf 3.0.1 • xpdf xpdf 3.0 pl2 • xpdf xpdf 3.0 pl3

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References