CVE-2005-3192

State: Published
Severity: Not scored
Published: Dec 8, 2005
Updated: Aug 7, 2024
Reserved: Oct 14, 2005

Description

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

17929third-party-advisory
19797third-party-advisory
xpdf-streampredictor-bo(23442)vdb-entry
DSA-932vendor-advisory
18349third-party-advisory
18055third-party-advisory
http://scary.beasts.org/security/CESA-2005-003.txt
http://www.kde.org/info/security/advisory-20051207-1.txt
18503third-party-advisory
oval:org.mitre.oval:def:10914vdb-entrysignature
18549third-party-advisory
http://www.kde.org/info/security/advisory-20051207-2.txt
18679third-party-advisory
18189third-party-advisory
26413third-party-advisory
17940third-party-advisory
18303third-party-advisory
DSA-931vendor-advisory
18554third-party-advisory
MDKSA-2006:003vendor-advisory
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289
19230third-party-advisory
102972vendor-advisory
DSA-962vendor-advisory
1015309vdb-entry
18398third-party-advisory
FLSA-2006:176751vendor-advisory
SUSE-SA:2006:001vendor-advisory
DSA-936vendor-advisory
17916third-party-advisory
RHSA-2005:840vendor-advisory
ADV-2005-2789vdb-entry
RHSA-2005:867vendor-advisory
18674third-party-advisory
MDKSA-2006:005vendor-advisory
18313third-party-advisory
https://issues.rpath.com/browse/RPL-1609
RHSA-2005:868vendor-advisory
18448third-party-advisory
18436third-party-advisory
18428third-party-advisory
18380third-party-advisory
GLSA-200512-08vendor-advisory
FEDORA-2005-1126vendor-advisory
18416third-party-advisory
ADV-2007-2280vdb-entry
GLSA-200601-02vendor-advisory
FEDORA-2005-1142vendor-advisory
18336third-party-advisory
18061third-party-advisory
18407third-party-advisory
18009third-party-advisory
17908third-party-advisory
USN-227-1vendor-advisory
18517third-party-advisory
18582third-party-advisory
SUSE-SR:2006:002vendor-advisory
18534third-party-advisory
20051205 Multiple Vendor xpdf StreamPredictor Heap Overflow Vulnerabilitythird-party-advisory
SSA:2006-045-09vendor-advisory
TSLSA-2005-0072vendor-advisory
FEDORA-2005-1127vendor-advisory
20051207 [KDE Security Advisory] multiple buffer overflows in kpdf/kofficemailing-list
18908third-party-advisory
25729third-party-advisory
ADV-2005-2786vdb-entry
MDKSA-2006:006vendor-advisory
ADV-2005-2788vdb-entry
17926third-party-advisory
19798third-party-advisory
ADV-2005-2755vdb-entry
15725vdb-entry
MDKSA-2006:008vendor-advisory
18191third-party-advisory
RHSA-2006:0160vendor-advisory
17912third-party-advisory
MDKSA-2006:010vendor-advisory
17921third-party-advisory
MDKSA-2006:004vendor-advisory
ADV-2005-2790vdb-entry
18389third-party-advisory
18192third-party-advisory
ADV-2005-2856vdb-entry
SSA:2006-045-04vendor-advisory
19377third-party-advisory
FLSA:175404vendor-advisory
DSA-961vendor-advisory
235third-party-advisory
18675third-party-advisory
1015324vdb-entry
18913third-party-advisory
SUSE-SR:2005:029vendor-advisory
DSA-937vendor-advisory
ADV-2005-2787vdb-entry
RHSA-2005:878vendor-advisory
FEDORA-2005-1141vendor-advisory
17920third-party-advisory
DSA-950vendor-advisory
17955third-party-advisory
17897third-party-advisory
17976third-party-advisory
18387third-party-advisory
240third-party-advisory
MDKSA-2006:011vendor-advisory
18385third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.