CVE-2005-3192 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2005-3192
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3192

Description: Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/23442 UBUNTU http://www.ubuntulinux.org/usn/usn-227-1 TRUSTIX http://www.trustix.org/errata/2005/0072/ SUSE http://www.novell.com/linux/security/advisories/2005_29_sr.html http://www.novell.com/linux/security/advisories/2006_02_sr.html http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 ST 1015309 1015324 SREASON http://securityreason.com/securityalert/240 http://securityreason.com/securityalert/235 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 SGI SCO SAID Secunia Advisory: SA26413 Secunia Advisory: SA25729 Secunia Advisory: SA19798 Secunia Advisory: SA19797 Secunia Advisory: SA18436 Secunia Advisory: SA18428 Secunia Advisory: SA18380 Secunia Advisory: SA18503 Secunia Advisory: SA19377 Secunia Advisory: SA19230 Secunia Advisory: SA18913 Secunia Advisory: SA18908 Secunia Advisory: SA18679 Secunia Advisory: SA18675 Secunia Advisory: SA18674 Secunia Advisory: SA17955 Secunia Advisory: SA18554 Secunia Advisory: SA18517 Secunia Advisory: SA18303 Secunia Advisory: SA18582 Secunia Advisory: SA18549 Secunia Advisory: SA18534 Secunia Advisory: SA18407 Secunia Advisory: SA18398 Secunia Advisory: SA18448 Secunia Advisory: SA18389 Secunia Advisory: SA18385 Secunia Advisory: SA18349 Secunia Advisory: SA18416 Secunia Advisory: SA18387 Secunia Advisory: SA18336 Secunia Advisory: SA18313 Secunia Advisory: SA18189 Secunia Advisory: SA18192 Secunia Advisory: SA17926 Secunia Advisory: SA18191 Secunia Advisory: SA18009 Secunia Advisory: SA18055 Secunia Advisory: SA18061 Secunia Advisory: SA17940 Secunia Advisory: SA17976 Secunia Advisory: SA17929 Secunia Advisory: SA17921 Secunia Advisory: SA17916 Secunia Advisory: SA17920 Secunia Advisory: SA17912 Secunia Advisory: SA17908 Secunia Advisory: SA17897 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0160.html http://rhn.redhat.com/errata/RHSA-2005-868.html http://www.redhat.com/support/errata/RHSA-2005-878.html http://www.redhat.com/support/errata/RHSA-2005-867.html http://www.redhat.com/support/errata/RHSA-2005-840.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10914 MISC http://scary.beasts.org/security/CESA-2005-003.txt http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 http://www.mandriva.com/security/advisories?name=MDKSA-2006:006 http://www.mandriva.com/security/advisories?name=MDKSA-2006:008 http://www.mandriva.com/security/advisories?name=MDKSA-2006:004 http://www.mandriva.com/security/advisories?name=MDKSA-2006:005 http://www.mandriva.com/security/advisories?name=MDKSA-2006:003 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 IDEFENSE http://www.idefense.com/application/poi/display?id=344&type=vulnerabilities GENTOO http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml FEDORA http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html DEBIAN http://www.debian.org/security/2006/dsa-937 http://www.debian.org/security/2006/dsa-962 http://www.debian.org/security/2006/dsa-936 http://www.debian.org/security/2006/dsa-950 http://www.debian.org/security/2006/dsa-961 http://www.debian.org/security/2005/dsa-932 http://www.debian.org/security/2005/dsa-931 CONFIRM http://www.kde.org/info/security/advisory-20051207-2.txt http://www.kde.org/info/security/advisory-20051207-1.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/418883/100/0/threaded BID 15725

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability