CVE-2005-3192

Xpdf 3.01 - Heap-Based Buffer Overflow via Out-of-Range numComps Field

Title source: llm
STIX 2.1

Description

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

References (112)

Core 112
Core References
Various Sources x_refsource_misc
http://scary.beasts.org/security/CESA-2005-003.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/23442
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10914
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/427053/100/0/threaded
Patch, Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-840.html
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-867.html
Various Sources vendor-advisory x_refsource_ubuntu
http://www.ubuntulinux.org/usn/usn-227-1
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/418883/100/0/threaded
Vendor Advisory vendor-advisory x_refsource_trustix
http://www.trustix.org/errata/2005/0072/
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1609
Various Sources x_refsource_confirm
http://www.kde.org/info/security/advisory-20051207-1.txt
Various Sources x_refsource_confirm
http://www.kde.org/info/security/advisory-20051207-2.txt
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17929
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19797
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-932
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18349
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18055
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18503
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18549
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18679
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18189
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/26413
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17940
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18303
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2005/dsa-931
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18554
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19230
Vendor Advisory vendor-advisory x_refsource_sunalert
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-962
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015309
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18398
Various Sources vendor-advisory x_refsource_suse
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-936
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17916
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2789
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18674
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18313
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2005-868.html
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18448
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18436
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18428
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18380
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18416
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/2280
Third Party Advisory vendor-advisory x_refsource_gentoo
http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18336
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18061
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18407
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18009
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17908
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18517
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18582
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2006_02_sr.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18534
Patch, Vendor Advisory third-party-advisory x_refsource_idefense
http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18908
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/25729
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2786
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2788
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17926
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19798
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2755
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15725
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18191
Vendor Advisory vendor-advisory x_refsource_sgi
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2006-0160.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17912
Vendor Advisory vendor-advisory x_refsource_mandrake
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17921
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2790
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18389
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18192
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2856
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/19377
Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora
http://www.securityfocus.com/archive/1/427990/100/0/threaded
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-961
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/235
Various Sources vendor-advisory x_refsource_sco
ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18675
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1015324
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18913
Vendor Advisory vendor-advisory x_refsource_suse
http://www.novell.com/linux/security/advisories/2005_29_sr.html
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-937
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2787
Vendor Advisory vendor-advisory x_refsource_redhat
http://www.redhat.com/support/errata/RHSA-2005-878.html
Vendor Advisory vendor-advisory x_refsource_fedora
http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17920
Third Party Advisory vendor-advisory x_refsource_debian
http://www.debian.org/security/2006/dsa-950
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17955
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17897/
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17976
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18387
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/240
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/18385

Scores

EPSS 0.0614
EPSS Percentile 92.7%

Details

CWE
CWE-119
Status published
Products (1)
xpdf/xpdf 3.0.1
Published Dec 08, 2005
Tracked Since Feb 18, 2026