CVE

Id
14397  
CVE No.
CVE-2005-3191  
Status
Candidate  
Description
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.  
Phase
Assigned (20051014)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
107586 14397 CVE-2005-3191 IDEFENSE:20051205 Multiple Vendor xpdf DCTStream Progressive Heap Overflow  View
107587 14397 CVE-2005-3191 URL:http://www.idefense.com/application/poi/display?id=343&type=vulnerabilities  View
107588 14397 CVE-2005-3191 IDEFENSE:Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability  View
107589 14397 CVE-2005-3191 URL:http://www.idefense.com/application/poi/display?id=342&type=vulnerabilities  View
107590 14397 CVE-2005-3191 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289  View
107591 14397 CVE-2005-3191 BUGTRAQ:20051207 [KDE Security Advisory] multiple buffer overflows in kpdf/koffice  View
107592 14397 CVE-2005-3191 URL:http://www.securityfocus.com/archive/1/archive/1/418883/100/0/threaded  View
107593 14397 CVE-2005-3191 CONFIRM:http://www.kde.org/info/security/advisory-20051207-1.txt  View
107594 14397 CVE-2005-3191 CONFIRM:http://www.kde.org/info/security/advisory-20051207-2.txt  View
107595 14397 CVE-2005-3191 CONFIRM:https://issues.rpath.com/browse/RPL-1609  View
107596 14397 CVE-2005-3191 DEBIAN:DSA-931  View
107597 14397 CVE-2005-3191 URL:http://www.debian.org/security/2005/dsa-931  View
107598 14397 CVE-2005-3191 DEBIAN:DSA-932  View
107599 14397 CVE-2005-3191 URL:http://www.debian.org/security/2005/dsa-932  View
107600 14397 CVE-2005-3191 DEBIAN:DSA-937  View
107601 14397 CVE-2005-3191 URL:http://www.debian.org/security/2005/dsa-937  View
107602 14397 CVE-2005-3191 DEBIAN:DSA-938  View
107603 14397 CVE-2005-3191 URL:http://www.debian.org/security/2005/dsa-938  View
107604 14397 CVE-2005-3191 DEBIAN:DSA-940  View
107605 14397 CVE-2005-3191 URL:http://www.debian.org/security/2005/dsa-940  View
107606 14397 CVE-2005-3191 DEBIAN:DSA-936  View
107607 14397 CVE-2005-3191 URL:http://www.debian.org/security/2006/dsa-936  View
107608 14397 CVE-2005-3191 DEBIAN:DSA-950  View
107609 14397 CVE-2005-3191 URL:http://www.debian.org/security/2006/dsa-950  View
107610 14397 CVE-2005-3191 DEBIAN:DSA-961  View
107611 14397 CVE-2005-3191 URL:http://www.debian.org/security/2006/dsa-961  View
107612 14397 CVE-2005-3191 DEBIAN:DSA-962  View
107613 14397 CVE-2005-3191 URL:http://www.debian.org/security/2006/dsa-962  View
107614 14397 CVE-2005-3191 FEDORA:FEDORA-2005-1141  View
107615 14397 CVE-2005-3191 URL:http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html  View
107616 14397 CVE-2005-3191 FEDORA:FEDORA-2005-1142  View
107617 14397 CVE-2005-3191 URL:http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html  View
107618 14397 CVE-2005-3191 FEDORA:FEDORA-2005-1126  View
107619 14397 CVE-2005-3191 URL:http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html  View
107620 14397 CVE-2005-3191 FEDORA:FEDORA-2005-1127  View
107621 14397 CVE-2005-3191 URL:http://www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html  View
107622 14397 CVE-2005-3191 FEDORA:FLSA:175404  View
107623 14397 CVE-2005-3191 URL:http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded  View
107624 14397 CVE-2005-3191 FEDORA:FLSA-2006:176751  View
107625 14397 CVE-2005-3191 URL:http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded  View
107626 14397 CVE-2005-3191 GENTOO:GLSA-200512-08  View
107627 14397 CVE-2005-3191 URL:http://www.gentoo.org/security/en/glsa/glsa-200512-08.xml  View
107628 14397 CVE-2005-3191 GENTOO:GLSA-200601-02  View
107629 14397 CVE-2005-3191 URL:http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml  View
107630 14397 CVE-2005-3191 MANDRAKE:MDKSA-2006:010  View
107631 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:010  View
107632 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:003  View
107633 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:003  View
107634 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:004  View
107635 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:004  View
107636 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:005  View
107637 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:005  View
107638 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:006  View
107639 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:006  View
107640 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:008  View
107641 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:008  View
107642 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:012  View
107643 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:012  View
107644 14397 CVE-2005-3191 MANDRIVA:MDKSA-2006:011  View
107645 14397 CVE-2005-3191 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2006:011  View
107646 14397 CVE-2005-3191 REDHAT:RHSA-2005:840  View
107647 14397 CVE-2005-3191 URL:http://www.redhat.com/support/errata/RHSA-2005-840.html  View
107648 14397 CVE-2005-3191 REDHAT:RHSA-2005:867  View
107649 14397 CVE-2005-3191 URL:http://www.redhat.com/support/errata/RHSA-2005-867.html  View
107650 14397 CVE-2005-3191 REDHAT:RHSA-2005:878  View
107651 14397 CVE-2005-3191 URL:http://www.redhat.com/support/errata/RHSA-2005-878.html  View
107652 14397 CVE-2005-3191 REDHAT:RHSA-2005:868  View
107653 14397 CVE-2005-3191 URL:http://rhn.redhat.com/errata/RHSA-2005-868.html  View
107654 14397 CVE-2005-3191 REDHAT:RHSA-2006:0160  View
107655 14397 CVE-2005-3191 URL:http://www.redhat.com/support/errata/RHSA-2006-0160.html  View
107656 14397 CVE-2005-3191 SCO:SCOSA-2006.15  View
107657 14397 CVE-2005-3191 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt  View
107658 14397 CVE-2005-3191 SCO:SCOSA-2006.20  View
107659 14397 CVE-2005-3191 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt  View
107660 14397 CVE-2005-3191 SCO:SCOSA-2006.21  View
107661 14397 CVE-2005-3191 URL:ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt  View
107662 14397 CVE-2005-3191 SGI:20051201-01-U  View
107663 14397 CVE-2005-3191 URL:ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U  View
107664 14397 CVE-2005-3191 SGI:20060101-01-U  View
107665 14397 CVE-2005-3191 URL:ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U  View
107666 14397 CVE-2005-3191 SGI:20060201-01-U  View
107667 14397 CVE-2005-3191 URL:ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U  View
107668 14397 CVE-2005-3191 SLACKWARE:SSA:2006-045-04  View
107669 14397 CVE-2005-3191 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747  View
107670 14397 CVE-2005-3191 SLACKWARE:SSA:2006-045-09  View
107671 14397 CVE-2005-3191 URL:http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683  View
107672 14397 CVE-2005-3191 SUNALERT:102972  View
107673 14397 CVE-2005-3191 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1  View
107674 14397 CVE-2005-3191 SUSE:SUSE-SA:2006:001  View
107675 14397 CVE-2005-3191 URL:http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html  View
107676 14397 CVE-2005-3191 SUSE:SUSE-SR:2006:002  View
107677 14397 CVE-2005-3191 URL:http://www.novell.com/linux/security/advisories/2006_02_sr.html  View
107678 14397 CVE-2005-3191 SUSE:SUSE-SR:2006:001  View
107679 14397 CVE-2005-3191 SUSE:SUSE-SR:2005:029  View
107680 14397 CVE-2005-3191 URL:http://www.novell.com/linux/security/advisories/2005_29_sr.html  View
107681 14397 CVE-2005-3191 TRUSTIX:TSLSA-2005-0072  View
107682 14397 CVE-2005-3191 URL:http://www.trustix.org/errata/2005/0072/  View
107683 14397 CVE-2005-3191 UBUNTU:USN-227-1  View
107684 14397 CVE-2005-3191 URL:http://www.ubuntulinux.org/usn/usn-227-1  View
107685 14397 CVE-2005-3191 BID:15726  View
107686 14397 CVE-2005-3191 URL:http://www.securityfocus.com/bid/15726  View
107687 14397 CVE-2005-3191 BID:15727  View
107688 14397 CVE-2005-3191 URL:http://www.securityfocus.com/bid/15727  View
107689 14397 CVE-2005-3191 OVAL:oval:org.mitre.oval:def:9760  View
107690 14397 CVE-2005-3191 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9760  View
107691 14397 CVE-2005-3191 VUPEN:ADV-2005-2786  View
107692 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2786  View
107693 14397 CVE-2005-3191 VUPEN:ADV-2005-2789  View
107694 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2789  View
107695 14397 CVE-2005-3191 VUPEN:ADV-2005-2790  View
107696 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2790  View
107697 14397 CVE-2005-3191 VUPEN:ADV-2005-2788  View
107698 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2788  View
107699 14397 CVE-2005-3191 VUPEN:ADV-2005-2856  View
107700 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2856  View
107701 14397 CVE-2005-3191 VUPEN:ADV-2005-2787  View
107702 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2005/2787  View
107703 14397 CVE-2005-3191 VUPEN:ADV-2007-2280  View
107704 14397 CVE-2005-3191 URL:http://www.vupen.com/english/advisories/2007/2280  View
107705 14397 CVE-2005-3191 SECTRACK:1015309  View
107706 14397 CVE-2005-3191 URL:http://securitytracker.com/id?1015309  View
107707 14397 CVE-2005-3191 SECTRACK:1015324  View
107708 14397 CVE-2005-3191 URL:http://securitytracker.com/id?1015324  View
107709 14397 CVE-2005-3191 SECUNIA:17908  View
107710 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17908  View
107711 14397 CVE-2005-3191 SECUNIA:17912  View
107712 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17912  View
107713 14397 CVE-2005-3191 SECUNIA:17916  View
107714 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17916  View
107715 14397 CVE-2005-3191 SECUNIA:17920  View
107716 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17920  View
107717 14397 CVE-2005-3191 SECUNIA:17921  View
107718 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17921  View
107719 14397 CVE-2005-3191 SECUNIA:17929  View
107720 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17929  View
107721 14397 CVE-2005-3191 SECUNIA:17940  View
107722 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17940  View
107723 14397 CVE-2005-3191 SECUNIA:17976  View
107724 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17976  View
107725 14397 CVE-2005-3191 SECUNIA:18009  View
107726 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18009  View
107727 14397 CVE-2005-3191 SECUNIA:18055  View
107728 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18055  View
107729 14397 CVE-2005-3191 SECUNIA:18061  View
107730 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18061  View
107731 14397 CVE-2005-3191 SECUNIA:17897  View
107732 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17897  View
107733 14397 CVE-2005-3191 SECUNIA:17926  View
107734 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17926  View
107735 14397 CVE-2005-3191 SECUNIA:18191  View
107736 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18191  View
107737 14397 CVE-2005-3191 SECUNIA:18192  View
107738 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18192  View
107739 14397 CVE-2005-3191 SECUNIA:18189  View
107740 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18189  View
107741 14397 CVE-2005-3191 SECUNIA:18313  View
107742 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18313  View
107743 14397 CVE-2005-3191 SECUNIA:18336  View
107744 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18336  View
107745 14397 CVE-2005-3191 SECUNIA:18387  View
107746 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18387  View
107747 14397 CVE-2005-3191 SECUNIA:18416  View
107748 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18416  View
107749 14397 CVE-2005-3191 SECUNIA:18349  View
107750 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18349  View
107751 14397 CVE-2005-3191 SECUNIA:18385  View
107752 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18385  View
107753 14397 CVE-2005-3191 SECUNIA:18389  View
107754 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18389  View
107755 14397 CVE-2005-3191 SECUNIA:18448  View
107756 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18448  View
107757 14397 CVE-2005-3191 SECUNIA:18398  View
107758 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18398  View
107759 14397 CVE-2005-3191 SECUNIA:18407  View
107760 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18407  View
107761 14397 CVE-2005-3191 SECUNIA:18534  View
107762 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18534  View
107763 14397 CVE-2005-3191 SECUNIA:18549  View
107764 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18549  View
107765 14397 CVE-2005-3191 SECUNIA:18582  View
107766 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18582  View
107767 14397 CVE-2005-3191 SECUNIA:18303  View
107768 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18303  View
107769 14397 CVE-2005-3191 SECUNIA:18517  View
107770 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18517  View
107771 14397 CVE-2005-3191 SECUNIA:18554  View
107772 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18554  View
107773 14397 CVE-2005-3191 SECUNIA:17955  View
107774 14397 CVE-2005-3191 URL:http://secunia.com/advisories/17955  View
107775 14397 CVE-2005-3191 SECUNIA:18674  View
107776 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18674  View
107777 14397 CVE-2005-3191 SECUNIA:18675  View
107778 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18675  View
107779 14397 CVE-2005-3191 SECUNIA:18679  View
107780 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18679  View
107781 14397 CVE-2005-3191 SECUNIA:18908  View
107782 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18908  View
107783 14397 CVE-2005-3191 SECUNIA:18913  View
107784 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18913  View
107785 14397 CVE-2005-3191 SECUNIA:19230  View
107786 14397 CVE-2005-3191 URL:http://secunia.com/advisories/19230  View
107787 14397 CVE-2005-3191 SECUNIA:19377  View
107788 14397 CVE-2005-3191 URL:http://secunia.com/advisories/19377  View
107789 14397 CVE-2005-3191 SECUNIA:18503  View
107790 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18503  View
107791 14397 CVE-2005-3191 SECUNIA:18147  View
107792 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18147  View
107793 14397 CVE-2005-3191 SECUNIA:18380  View
107794 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18380  View
107795 14397 CVE-2005-3191 SECUNIA:18428  View
107796 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18428  View
107797 14397 CVE-2005-3191 SECUNIA:18436  View
107798 14397 CVE-2005-3191 URL:http://secunia.com/advisories/18436  View
107799 14397 CVE-2005-3191 SECUNIA:19797  View
107800 14397 CVE-2005-3191 URL:http://secunia.com/advisories/19797  View
107801 14397 CVE-2005-3191 SECUNIA:19798  View
107802 14397 CVE-2005-3191 URL:http://secunia.com/advisories/19798  View
107803 14397 CVE-2005-3191 SECUNIA:25729  View
107804 14397 CVE-2005-3191 URL:http://secunia.com/advisories/25729  View
107805 14397 CVE-2005-3191 SECUNIA:26413  View
107806 14397 CVE-2005-3191 URL:http://secunia.com/advisories/26413  View
107807 14397 CVE-2005-3191 SREASON:233  View
107808 14397 CVE-2005-3191 URL:http://securityreason.com/securityalert/233  View
107809 14397 CVE-2005-3191 SREASON:234  View
107810 14397 CVE-2005-3191 URL:http://securityreason.com/securityalert/234  View
107811 14397 CVE-2005-3191 XF:xpdf-dctstream-baseline-bo(23444)  View
107812 14397 CVE-2005-3191 URL:http://xforce.iss.net/xforce/xfdb/23444  View
107813 14397 CVE-2005-3191 XF:xpdf-dctstream-progressive-bo(23443)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62515 JVNDB-2005-000717 Xpdf の JPXStream::readCodestream() 関数におけるヒープオーバーフローの脆弱性 Xpdf には xpdf/JPXStream.cc の JPXStream::readCodestream() 関数において、PDF ファイルに含まれる Xtiles、nYTiles の値に対する境界チェックが不適切であるため、メモリ領域にデータをコピーする際にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2005-3193 14397 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000717.html  View