CVE-2005-3191 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2005-3191
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3191

Description: Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/23444 http://xforce.iss.net/xforce/xfdb/23443 UBUNTU http://www.ubuntulinux.org/usn/usn-227-1 TRUSTIX http://www.trustix.org/errata/2005/0072/ SUSE http://www.novell.com/linux/security/advisories/2006_02_sr.html http://www.novell.com/linux/security/advisories/2005_29_sr.html http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 ST 1015324 1015309 SREASON http://securityreason.com/securityalert/234 http://securityreason.com/securityalert/233 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 SGI SCO SAID Secunia Advisory: SA26413 Secunia Advisory: SA25729 Secunia Advisory: SA19798 Secunia Advisory: SA19797 Secunia Advisory: SA18436 Secunia Advisory: SA18428 Secunia Advisory: SA18380 Secunia Advisory: SA18147 Secunia Advisory: SA18503 Secunia Advisory: SA19377 Secunia Advisory: SA19230 Secunia Advisory: SA18913 Secunia Advisory: SA18908 Secunia Advisory: SA18679 Secunia Advisory: SA18675 Secunia Advisory: SA18674 Secunia Advisory: SA17955 Secunia Advisory: SA18554 Secunia Advisory: SA18517 Secunia Advisory: SA18303 Secunia Advisory: SA18582 Secunia Advisory: SA18549 Secunia Advisory: SA18534 Secunia Advisory: SA18407 Secunia Advisory: SA18398 Secunia Advisory: SA18448 Secunia Advisory: SA18389 Secunia Advisory: SA18385 Secunia Advisory: SA18349 Secunia Advisory: SA18416 Secunia Advisory: SA18387 Secunia Advisory: SA18336 Secunia Advisory: SA18313 Secunia Advisory: SA18189 Secunia Advisory: SA18192 Secunia Advisory: SA18191 Secunia Advisory: SA17926 Secunia Advisory: SA18061 Secunia Advisory: SA17897 Secunia Advisory: SA18055 Secunia Advisory: SA18009 Secunia Advisory: SA17976 Secunia Advisory: SA17940 Secunia Advisory: SA17929 Secunia Advisory: SA17921 Secunia Advisory: SA17920 Secunia Advisory: SA17912 Secunia Advisory: SA17916 Secunia Advisory: SA17908 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0160.html http://www.redhat.com/support/errata/RHSA-2005-878.html http://rhn.redhat.com/errata/RHSA-2005-868.html http://www.redhat.com/support/errata/RHSA-2005-867.html http://www.redhat.com/support/errata/RHSA-2005-840.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9760 MISC http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 http://www.mandriva.com/security/advisories?name=MDKSA-2006:008 http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 http://www.mandriva.com/security/advisories?name=MDKSA-2006:005 http://www.mandriva.com/security/advisories?name=MDKSA-2006:006 http://www.mandriva.com/security/advisories?name=MDKSA-2006:004 http://www.mandriva.com/security/advisories?name=MDKSA-2006:003 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 IDEFENSE http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities GENTOO http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml FEDORA http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html DEBIAN http://www.debian.org/security/2006/dsa-962 http://www.debian.org/security/2006/dsa-961 http://www.debian.org/security/2006/dsa-950 http://www.debian.org/security/2006/dsa-936 http://www.debian.org/security/2005/dsa-940 http://www.debian.org/security/2005/dsa-932 http://www.debian.org/security/2005/dsa-937 http://www.debian.org/security/2005/dsa-938 http://www.debian.org/security/2005/dsa-931 CONFIRM http://www.kde.org/info/security/advisory-20051207-2.txt http://www.kde.org/info/security/advisory-20051207-1.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/418883/100/0/threaded BID 15727 15726

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability