CVE-2005-3193

xpdf - Heap-Based Buffer Overflow in JPXStream::readCodestream

Title source: llm

Description

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

References (111)

Core 111

Core References

Various Sources x_refsource_confirm

http://www.kde.org/info/security/advisory-20051207-1.txt

Various Sources x_refsource_confirm

http://www.kde.org/info/security/advisory-20051207-2.txt

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:003

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015309

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200603-02.xml

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-840.html

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-867.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html

Third Party Advisory vendor-advisory x_refsource_gentoo

http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/23441

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00073.html

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00022.html

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:012

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:005

Vendor Advisory vendor-advisory x_refsource_trustix

http://www.trustix.org/errata/2005/0072/

Issue Tracking x_refsource_confirm

https://issues.rpath.com/browse/RPL-1609

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18554

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17959

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17929

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19797

Various Sources vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2005/dsa-932

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18349

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18147

Various Sources vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18055

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18679

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18189

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26413

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17940

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18303

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2005/dsa-931

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19230

Vendor Advisory vendor-advisory x_refsource_sunalert

http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-962

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2005/dsa-937

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18398

Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora

http://www.securityfocus.com/archive/1/427053/100/0/threaded

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/15721

Various Sources vendor-advisory x_refsource_suse

http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-936

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17916

Third Party Advisory third-party-advisory x_refsource_sreason

http://securityreason.com/securityalert/236

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/2789

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18674

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18313

Vendor Advisory vendor-advisory x_refsource_redhat

http://rhn.redhat.com/errata/RHSA-2005-868.html

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18448

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18380

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18416

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/2280

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19125

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18336

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18061

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18407

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18009

Various Sources vendor-advisory x_refsource_ubuntu

http://www.ubuntulinux.org/usn/usn-227-1

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17897

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18517

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18582

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18534

Vendor Advisory vendor-advisory x_refsource_slackware

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18520

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/418883/100/0/threaded

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18908

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/25729

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:006

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17956

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17926

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19798

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:008

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18191

Vendor Advisory vendor-advisory x_refsource_sgi

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2006-0160.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17912

Vendor Advisory vendor-advisory x_refsource_mandrake

http://www.mandriva.com/security/advisories?name=MDKSA-2006:010

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2005/dsa-940

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:004

Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11440

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/2790

Patch, Vendor Advisory third-party-advisory x_refsource_idefense

http://www.idefense.com/application/poi/display?id=345&type=vulnerabilities&flashstatus=true

Vendor Advisory x_refsource_confirm

http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00043.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18389

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18192

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/2856

Vendor Advisory vendor-advisory x_refsource_slackware

http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/19377

Third Party Advisory, VDB Entry vendor-advisory x_refsource_fedora

http://www.securityfocus.com/archive/1/427990/100/0/threaded

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-961

Various Sources vendor-advisory x_refsource_sco

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18675

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1015324

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18913

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2005/dsa-938

Vendor Advisory vendor-advisory x_refsource_suse

http://www.novell.com/linux/security/advisories/2005_29_sr.html

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2005/2787

Vendor Advisory vendor-advisory x_refsource_redhat

http://www.redhat.com/support/errata/RHSA-2005-878.html

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17920

Third Party Advisory vendor-advisory x_refsource_debian

http://www.debian.org/security/2006/dsa-950

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17955

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/17976

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18387

Vendor Advisory vendor-advisory x_refsource_fedora

http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00014.html

Vendor Advisory vendor-advisory x_refsource_mandriva

http://www.mandriva.com/security/advisories?name=MDKSA-2006:011

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/18385

Scores

EPSS 0.0408

EPSS Percentile 89.6%

Details

CWE

CWE-119

Status published

Products (15)

xpdf/xpdf 0.90

xpdf/xpdf 0.91

xpdf/xpdf 0.92

xpdf/xpdf 0.93

xpdf/xpdf 1.0

xpdf/xpdf 1.0a

xpdf/xpdf 1.1

xpdf/xpdf 2.0

xpdf/xpdf 2.1

xpdf/xpdf 2.2

... and 5 more

Published Dec 07, 2005

Tracked Since Feb 18, 2026