CVE-2005-3193 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2005-3193
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2005-3193

Description: Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/23441 UBUNTU http://www.ubuntulinux.org/usn/usn-227-1 TRUSTIX http://www.trustix.org/errata/2005/0072/ SUSE http://www.novell.com/linux/security/advisories/2005_29_sr.html http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html SUNALERT http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 ST 1015324 1015309 SREASON http://securityreason.com/securityalert/236 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 SGI SCO SAID Secunia Advisory: SA26413 Secunia Advisory: SA25729 Secunia Advisory: SA19798 Secunia Advisory: SA19797 Secunia Advisory: SA18520 Secunia Advisory: SA18380 Secunia Advisory: SA18147 Secunia Advisory: SA19377 Secunia Advisory: SA19230 Secunia Advisory: SA19125 Secunia Advisory: SA18913 Secunia Advisory: SA18908 Secunia Advisory: SA18679 Secunia Advisory: SA18675 Secunia Advisory: SA18674 Secunia Advisory: SA17959 Secunia Advisory: SA17956 Secunia Advisory: SA17955 Secunia Advisory: SA18554 Secunia Advisory: SA18517 Secunia Advisory: SA18303 Secunia Advisory: SA18582 Secunia Advisory: SA18534 Secunia Advisory: SA18407 Secunia Advisory: SA18398 Secunia Advisory: SA18448 Secunia Advisory: SA18389 Secunia Advisory: SA18385 Secunia Advisory: SA18349 Secunia Advisory: SA18416 Secunia Advisory: SA18387 Secunia Advisory: SA17929 Secunia Advisory: SA17940 Secunia Advisory: SA17976 Secunia Advisory: SA18009 Secunia Advisory: SA18055 Secunia Advisory: SA18336 Secunia Advisory: SA18313 Secunia Advisory: SA18189 Secunia Advisory: SA18192 Secunia Advisory: SA18191 Secunia Advisory: SA17926 Secunia Advisory: SA17897 Secunia Advisory: SA18061 Secunia Advisory: SA17916 Secunia Advisory: SA17920 Secunia Advisory: SA17912 REDHAT http://www.redhat.com/support/errata/RHSA-2006-0160.html http://www.redhat.com/support/errata/RHSA-2005-867.html http://rhn.redhat.com/errata/RHSA-2005-868.html http://www.redhat.com/support/errata/RHSA-2005-878.html http://www.redhat.com/support/errata/RHSA-2005-840.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11440 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 http://www.mandriva.com/security/advisories?name=MDKSA-2006:006 http://www.mandriva.com/security/advisories?name=MDKSA-2006:008 http://www.mandriva.com/security/advisories?name=MDKSA-2006:005 http://www.mandriva.com/security/advisories?name=MDKSA-2006:004 http://www.mandriva.com/security/advisories?name=MDKSA-2006:003 MANDRAKE http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 IDEFENSE http://www.idefense.com/application/poi/display?id=345&type=vulnerabilities&flashstatus=true GENTOO http://www.gentoo.org/security/en/glsa/glsa-200603-02.xml http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml FEDORA http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00073.html http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00014.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html DEBIAN http://www.debian.org/security/2006/dsa-962 http://www.debian.org/security/2006/dsa-961 http://www.debian.org/security/2006/dsa-950 http://www.debian.org/security/2006/dsa-936 http://www.debian.org/security/2005/dsa-940 http://www.debian.org/security/2005/dsa-932 http://www.debian.org/security/2005/dsa-937 http://www.debian.org/security/2005/dsa-938 http://www.debian.org/security/2005/dsa-931 CONFIRM http://www.kde.org/info/security/advisory-20051207-2.txt http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00043.html http://www.kde.org/info/security/advisory-20051207-1.txt BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/418883/100/0/threaded BID 15721

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability