CVE-2005-3191

MITRE NVD CVE.ORG Print: PDF PDF

Summary

CVECVE-2005-3191
StatePUBLIC
Assigner[email protected]
Source PriorityCVE Program / NVD first with legacy fallback
Published2005-12-07 01:03:00 UTC
Updated2018-10-19 15:34:00 UTC
DescriptionMultiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.

Risk And Classification

Problem Types: CWE-119

NVD Known Affected Configurations (CPE 2.3)

TypeVendorProductVersionUpdateEditionLanguage
Application Xpdf Xpdf 0.90 All All All
Application Xpdf Xpdf 0.91 All All All
Application Xpdf Xpdf 0.92 All All All
Application Xpdf Xpdf 0.93 All All All
Application Xpdf Xpdf 1.0 All All All
Application Xpdf Xpdf 1.0a All All All
Application Xpdf Xpdf 1.1 All All All
Application Xpdf Xpdf 2.0 All All All
Application Xpdf Xpdf 2.1 All All All
Application Xpdf Xpdf 2.2 All All All
Application Xpdf Xpdf 2.3 All All All
Application Xpdf Xpdf 3.0 All All All
Application Xpdf Xpdf 3.0.1 All All All
Application Xpdf Xpdf 3.0_pl2 All All All
Application Xpdf Xpdf 3.0_pl3 All All All
Application Xpdf Xpdf 0.90 All All All
Application Xpdf Xpdf 0.91 All All All
Application Xpdf Xpdf 0.92 All All All
Application Xpdf Xpdf 0.93 All All All
Application Xpdf Xpdf 1.0 All All All
Application Xpdf Xpdf 1.0a All All All
Application Xpdf Xpdf 1.1 All All All
Application Xpdf Xpdf 2.0 All All All
Application Xpdf Xpdf 2.1 All All All
Application Xpdf Xpdf 2.2 All All All
Application Xpdf Xpdf 2.3 All All All
Application Xpdf Xpdf 3.0 All All All
Application Xpdf Xpdf 3.0.1 All All All
Application Xpdf Xpdf 3.0_pl2 All All All
Application Xpdf Xpdf 3.0_pl3 All All All

References

ReferenceSourceLinkTags
[SECURITY] Fedora Core 3 Update: tetex-2.0.2-21.5 FEDORA www.redhat.com
Accenture | Let there be change IDEFENSE www.idefense.com Patch, Vendor Advisory
Support REDHAT www.redhat.com Vendor Advisory
Secunia - Advisories - Debian update for pdfkit.framework SECUNIA secunia.com
Secunia - Advisories - Xpdf Multiple Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
SGI Advanced Linux Environment Multiple Updates - Advisories - Secunia SECUNIA secunia.com
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
Secunia - Advisories - Red Hat update for kdegraphics SECUNIA secunia.com Vendor Advisory
[SECURITY] Fedora Core 3 Update: cups-1.1.22-0.rc1.8.8 FEDORA www.redhat.com
XPDF DCTStream Progressive Remote Heap Buffer Overflow Vulnerability BID www.securityfocus.com
Secunia - Advisories - Debian update for tetex-bin SECUNIA secunia.com
Accenture | Let there be change IDEFENSE www.idefense.com Patch, Vendor Advisory
Webmail - OVH VUPEN www.vupen.com
Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability - CXSecurity.com SREASON securityreason.com
Debian -- Security Information -- DSA-936-1 libextractor DEBIAN www.debian.org
Secunia - Advisories - GNOME gpdf Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Mandriva update for cups SECUNIA secunia.com Vendor Advisory
SecurityFocus FEDORA www.securityfocus.com
SUSE update for multiple packages - Advisories - Secunia SECUNIA secunia.com
Debian -- Page not found DEBIAN www.debian.org
Secunia - Advisories - xpdf Multiple Integer Overflow Vulnerabilities SECUNIA secunia.com
Webmail - OVH VUPEN www.vupen.com
IBM X-Force Exchange XF exchange.xforce.ibmcloud.com
SuSE Security announcements: [suse-security-announce] SUSE Security Announcement: xpdf,kpdf,gpdf,kword (SUSE-SA:2006:001) SUSE lists.suse.com
Multiple Vendor xpdf DCTStream Progressive Heap Overflow - CXSecurity.com SREASON securityreason.com
Debian -- Security Information -- DSA-962-1 pdftohtml DEBIAN www.debian.org
Advisories - Mandriva Linux MANDRIVA www.mandriva.com
rhn.redhat.com | Red Hat Support REDHAT www.redhat.com
IBM X-Force Exchange XF exchange.xforce.ibmcloud.com
Secunia - Advisories - KOffice KWord PDF Filter Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Fedora update for xpdf SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Slackware update for xpdf SECUNIA secunia.com
Webmail - OVH VUPEN www.vupen.com
Advisories - Mandriva Linux OS MANDRAKE www.mandriva.com
20060201-01-U SGI patches.sgi.com
SecurityFocus BUGTRAQ www.securityfocus.com
Secunia - Advisories - SGI Advanced Linux Environment Multiple Updates SECUNIA secunia.com
20051201-01-U SGI patches.sgi.com
Secunia - Advisories - CUPS xpdf Multiple Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
#342289 - xpdf security problems partially affect pdftohtml as well - Debian Bug report logs MISC bugs.debian.org
[SECURITY] Fedora Core 4 Update: cups-1.1.23-15.2 FEDORA www.redhat.com
20060101-01-U SGI patches.sgi.com
Gentoo Linux Documentation -- Xpdf, GPdf, CUPS, Poppler: Multiple vulnerabilities GENTOO www.gentoo.org
Secunia - Advisories - Red Hat update for xpdf SECUNIA secunia.com Vendor Advisory
TSLSA-2005-0072 TRUSTIX www.trustix.org
Secunia - Advisories - Gentoo updates for xpdf / gpdf / cups / poppler SECUNIA secunia.com Vendor Advisory
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
Repository / Oval Repository OVAL oval.cisecurity.org
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
Secunia - Advisories - Debian update for libextractor SECUNIA secunia.com
www.kde.org/info/security/advisory-20051207-1.txt CONFIRM www.kde.org
Sun Solaris Gnome PDF Viewer Multiple Vulnerabilities - Advisories - Secunia SECUNIA secunia.com
[SECURITY] Fedora Core 4 Update: tetex-3.0-7.FC4 FEDORA www.redhat.com
Debian -- Page not found DEBIAN www.debian.org
Debian -- Page not found DEBIAN www.debian.org
Gentoo Linux Documentation -- KPdf, KWord: Multiple overflows in included Xpdf code GENTOO www.gentoo.org
Secunia - Advisories - Debian update for kpdf SECUNIA secunia.com
Secunia - Advisories - SGI Advanced Linux Environment Multiple Updates SECUNIA secunia.com
Secunia - Advisories - Red Hat update for cups SECUNIA secunia.com Vendor Advisory
Security Announcement SUSE www.novell.com
Security Announcement SUSE www.novell.com
The Slackware Linux Project: Slackware Security Advisories SLACKWARE slackware.com
Debian -- Page not found DEBIAN www.debian.org
rhn.redhat.com | Red Hat Support REDHAT rhn.redhat.com Vendor Advisory
Secunia - Advisories - Debian update for koffice SECUNIA secunia.com
Secunia - Advisories - UnixWare update for CUPS SECUNIA secunia.com
Secunia - Advisories - Gentoo update for kdegraphics / kpdf / koffice / kword SECUNIA secunia.com Vendor Advisory
102972 SUNALERT sunsolve.sun.com
www.kde.org/info/security/advisory-20051207-2.txt CONFIRM www.kde.org
Debian -- Page not found DEBIAN www.debian.org
Secunia - Advisories - Fedora update for tetex SECUNIA secunia.com
SecurityTracker.com Archives - KDE KOffice kpdf Buffer Overflows in Processing DCT and JPX Streams May Let Remote Users Execute Arbitrary Code SECTRACK securitytracker.com
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
SCOSA-2006.20 SCO ftp.sco.com
The Slackware Linux Project: Slackware Security Advisories SLACKWARE slackware.com
Advisories - Mandriva Linux OS MANDRIVA www.mandriva.com
Webmail - OVH VUPEN www.vupen.com
Secunia - Advisories - libextractor Multiple Xpdf Vulnerabilities SECUNIA secunia.com
Secunia - Advisories - SCO OpenServer update for CUPS SECUNIA secunia.com
Secunia - Advisories - SUSE updates for xpdf / kpdf / gpdf / kword SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Debian update for pdftohtml SECUNIA secunia.com
USN-227-1: xpdf vulnerabilities | Ubuntu security notices | Ubuntu UBUNTU www.ubuntulinux.org
Secunia - Advisories - pdftohtml Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
Debian -- Security Information -- DSA-961-1 pdfkit.framework DEBIAN www.debian.org
Secunia - Advisories - SUSE update for multiple packages SECUNIA secunia.com
Secunia - Advisories - Red Hat update for tetex SECUNIA secunia.com
Secunia - Advisories - teTeX Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Debian update for cupsys SECUNIA secunia.com
Secunia - Advisories - Slackware update for kdegraphics SECUNIA secunia.com
Secunia - Advisories - Mandriva update for xpdf SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Ubuntu updates for xpdf / cupsys / tetex-bin / kdegraphics / koffice SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - GNUStep PDFKit Framework Xpdf Multiple Vulnerabilities SECUNIA secunia.com
XPDF DCTStream Baseline Remote Heap Buffer Overflow Vulnerability BID www.securityfocus.com
Secunia - Advisories - Debian update for xpdf SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - KDE kpdf Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
Webmail - OVH VUPEN www.vupen.com
rhn.redhat.com | Red Hat Support REDHAT www.redhat.com Vendor Advisory
Secunia - Advisories - Poppler Xpdf Buffer Overflow Vulnerabilities SECUNIA secunia.com Vendor Advisory
rhn.redhat.com | Red Hat Support REDHAT www.redhat.com Vendor Advisory
SCOSA-2006.15 SCO ftp.sco.com
SecurityFocus FEDORA www.securityfocus.com
SCOSA-2006.21 SCO ftp.sco.com
Secunia - Advisories - Trustix update for cups / curl SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Mandriva update for tetex SECUNIA secunia.com
Webmail - OVH VUPEN www.vupen.com
Debian -- Security Information -- DSA-950-1 cupsys DEBIAN www.debian.org
SecurityTracker.com Archives - Xpdf Buffer Overflows in Processing DCT and JPX Streams May Let Remote Users Execute Arbitrary Code SECTRACK securitytracker.com
rPath update for cups, poppler, and tetex - Advisories - Secunia SECUNIA secunia.com
Red Hat update for gpdf - Secunia Advisories - Vulnerability Intelligence - Secunia.com SECUNIA secunia.com Vendor Advisory
issues.rpath.com/browse/RPL-1609 CONFIRM issues.rpath.com
Secunia - Advisories - Debian update for gpdf SECUNIA secunia.com
Webmail - OVH VUPEN www.vupen.com
Secunia - Advisories - Fedora update for cups SECUNIA secunia.com Vendor Advisory
Secunia - Advisories - Fedora update for tetex SECUNIA secunia.com
SCO OpenServer update for xpdf - Advisories - Secunia SECUNIA secunia.com
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

Vendor Comments And Credit

OrganizationPublishedContributorStatement
Red Hat2007-03-14Mark J CoxRed Hat Enterprise Linux 5 is not vulnerable to this issue as it contains a backported patch.
© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

CVE.report and Source URL Uptime Status status.cve.report