Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2005-3191

Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.

Published

2005-12-07T01:03:00.000

Last Modified

2025-04-03T01:03:51.193

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 5.1 (MEDIUM)

CVSSv2 Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

  • Access Vector: NETWORK
  • Access Complexity: HIGH
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: PARTIAL
  • Availability Impact: PARTIAL
Exploitability Score

4.9

Impact Score

6.4

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application xpdf xpdf 0.90 Yes
Application xpdf xpdf 0.91 Yes
Application xpdf xpdf 0.92 Yes
Application xpdf xpdf 0.93 Yes
Application xpdf xpdf 1.0 Yes
Application xpdf xpdf 1.0a Yes
Application xpdf xpdf 1.1 Yes
Application xpdf xpdf 2.0 Yes
Application xpdf xpdf 2.1 Yes
Application xpdf xpdf 2.2 Yes
Application xpdf xpdf 2.3 Yes
Application xpdf xpdf 3.0 Yes
Application xpdf xpdf 3.0.1 Yes
Application xpdf xpdf 3.0_pl2 Yes
Application xpdf xpdf 3.0_pl3 Yes
References