Description
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
Analysis and contextual insights are available on OpenCVE Cloud.
Remediation
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-932-1 | New kpdf packages fix arbitrary code execution |
Debian DSA |
DSA-936-1 | New libextractor packages fix arbitrary code execution |
Debian DSA |
DSA-937-1 | New tetex-bin packages fix arbitrary code execution |
Debian DSA |
DSA-940-1 | New gpdf packages fix arbitrary code execution |
Debian DSA |
DSA-950-1 | New CUPS packages fix arbitrary code execution |
Debian DSA |
DSA-961-1 | New pdfkit.framework packages fix arbitrary code execution |
Debian DSA |
DSA-962-1 | New pdftohtml packages fix arbitrary code execution |
Ubuntu USN |
USN-227-1 | xpdf vulnerabilities |
References
History
No history.
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2024-08-07T23:01:59.286Z
Reserved: 2005-10-14T00:00:00.000Z
Link: CVE-2005-3192
No data.
Status : Modified
Published: 2005-12-08T01:03:00.000
Modified: 2026-04-16T00:27:16.627
Link: CVE-2005-3192
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
Ubuntu USN