CVE-2005-3191

See a problem?
Please try reporting it to the source first.

Source

https://nvd.nist.gov/vuln/detail/CVE-2005-3191

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2005-3191.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2005-3191

Related

Published

2005-12-07T01:03:00Z

Modified

2024-06-30T12:00:03Z

Summary

[none]

Details

Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.

References

Affected packages

Debian:11 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.23-13

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:12 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.23-13

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:13 / cups

Package

Name: cups
Purl: pkg:deb/debian/cups?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.1.23-13

Ecosystem specific

{
    "urgency": "unimportant"
}

Debian:11 / libextractor

Package

Name: libextractor
Purl: pkg:deb/debian/libextractor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.8-1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:12 / libextractor

Package

Name: libextractor
Purl: pkg:deb/debian/libextractor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.8-1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:13 / libextractor

Package

Name: libextractor
Purl: pkg:deb/debian/libextractor?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.5.8-1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:11 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.2-1.1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:12 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.2-1.1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:13 / poppler

Package

Name: poppler
Purl: pkg:deb/debian/poppler?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

0.4.2-1.1

Ecosystem specific

{
    "urgency": "medium"
}

Debian:11 / xpdf

Package

Name: xpdf
Purl: pkg:deb/debian/xpdf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.01-3

Ecosystem specific

{
    "urgency": "medium"
}

Debian:12 / xpdf

Package

Name: xpdf
Purl: pkg:deb/debian/xpdf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.01-3

Ecosystem specific

{
    "urgency": "medium"
}

Debian:13 / xpdf

Package

Name: xpdf
Purl: pkg:deb/debian/xpdf?arch=source

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.01-3

Ecosystem specific

{
    "urgency": "medium"
}