CVE-2005-3191 | BDVDB-2026-13857 Detail
Description#
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://securityreason.com/securityalert/234
- http://secunia.com/advisories/17929
- http://secunia.com/advisories/19797
- http://securityreason.com/securityalert/233
- http://www.debian.org/security/2005/dsa-932
- http://secunia.com/advisories/18349
- http://secunia.com/advisories/18147
- http://secunia.com/advisories/18055
- http://www.kde.org/info/security/advisory-20051207-1.txt
- http://secunia.com/advisories/18503
- http://secunia.com/advisories/18549
- http://www.kde.org/info/security/advisory-20051207-2.txt
- http://secunia.com/advisories/18679
- http://secunia.com/advisories/18189
- http://secunia.com/advisories/26413
Show all 40
- http://secunia.com/advisories/17940
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9760
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23444
- http://secunia.com/advisories/18303
- http://www.debian.org/security/2005/dsa-931
- http://secunia.com/advisories/18554
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289
- http://secunia.com/advisories/19230
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
- http://www.debian.org/security/2006/dsa-962
- http://securitytracker.com/id?1015309
- http://www.debian.org/security/2005/dsa-937
- http://secunia.com/advisories/18398
- http://www.securityfocus.com/archive/1/427053/100/0/threaded
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
- http://www.debian.org/security/2006/dsa-936
- http://secunia.com/advisories/17916
- http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities
- http://www.redhat.com/support/errata/RHSA-2005-840.html
- http://www.vupen.com/english/advisories/2005/2789
- http://www.redhat.com/support/errata/RHSA-2005-867.html
- http://secunia.com/advisories/18674
- http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.