NVD

Id
68853  
Name
CVE-2005-3191  
Description
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2005-12-06  
Modified Date
2017-07-10  
Seq
2005-3191  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
355689 68853 CVE-2005-3191 SCOSA-2006.15  View
355690 68853 CVE-2005-3191 SCOSA-2006.20  View
355691 68853 CVE-2005-3191 SCOSA-2006.21  View
355692 68853 CVE-2005-3191 20051201-01-U  View
355693 68853 CVE-2005-3191 20060101-01-U  View
355694 68853 CVE-2005-3191 20060201-01-U  View
355695 68853 CVE-2005-3191 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289  View
355696 68853 CVE-2005-3191 SUSE-SA:2006:001  View
355697 68853 CVE-2005-3191 oval:org.mitre.oval:def:9760  View
355698 68853 CVE-2005-3191 RHSA-2005:868  View
355699 68853 CVE-2005-3191 233  View
355700 68853 CVE-2005-3191 234  View
355701 68853 CVE-2005-3191 1015309  View
355702 68853 CVE-2005-3191 1015324  View
355703 68853 CVE-2005-3191 SSA:2006-045-09  View
355704 68853 CVE-2005-3191 SSA:2006-045-04  View
355705 68853 CVE-2005-3191 102972  View
355706 68853 CVE-2005-3191 DSA-931  View
355707 68853 CVE-2005-3191 DSA-932  View
355708 68853 CVE-2005-3191 DSA-937  View
355709 68853 CVE-2005-3191 DSA-938  View
355710 68853 CVE-2005-3191 DSA-940  View
355711 68853 CVE-2005-3191 DSA-936  View
355712 68853 CVE-2005-3191 DSA-950  View
355713 68853 CVE-2005-3191 DSA-961  View
355714 68853 CVE-2005-3191 DSA-962  View
355715 68853 CVE-2005-3191 GLSA-200512-08  View
355716 68853 CVE-2005-3191 GLSA-200601-02  View
355717 68853 CVE-2005-3191 Multiple Vendor xpdf DCTStream Baseline Heap Overflow Vulnerability  View
355718 68853 CVE-2005-3191 20051205 Multiple Vendor xpdf DCTStream Progressive Heap Overflow  View
355719 68853 CVE-2005-3191 http://www.kde.org/info/security/advisory-20051207-1.txt  View
355720 68853 CVE-2005-3191 http://www.kde.org/info/security/advisory-20051207-2.txt  View
355721 68853 CVE-2005-3191 MDKSA-2006:003  View
355722 68853 CVE-2005-3191 MDKSA-2006:004  View
355723 68853 CVE-2005-3191 MDKSA-2006:005  View
355724 68853 CVE-2005-3191 MDKSA-2006:006  View
355725 68853 CVE-2005-3191 MDKSA-2006:008  View
355726 68853 CVE-2005-3191 MDKSA-2006:011  View
355727 68853 CVE-2005-3191 MDKSA-2006:012  View
355728 68853 CVE-2005-3191 SUSE-SR:2005:029  View
355729 68853 CVE-2005-3191 SUSE-SR:2006:002  View
355730 68853 CVE-2005-3191 FEDORA-2005-1126  View
355731 68853 CVE-2005-3191 FEDORA-2005-1127  View
355732 68853 CVE-2005-3191 FEDORA-2005-1141  View
355733 68853 CVE-2005-3191 FEDORA-2005-1142  View
355734 68853 CVE-2005-3191 RHSA-2005:840  View
355735 68853 CVE-2005-3191 RHSA-2005:867  View
355736 68853 CVE-2005-3191 RHSA-2005:878  View
355737 68853 CVE-2005-3191 RHSA-2006:0160  View
355738 68853 CVE-2005-3191 20051207 [KDE Security Advisory] multiple buffer overflows in kpdf/koffice  View
355739 68853 CVE-2005-3191 FLSA-2006:176751  View
355740 68853 CVE-2005-3191 FLSA:175404  View
355741 68853 CVE-2005-3191 15726  View
355742 68853 CVE-2005-3191 15727  View
355743 68853 CVE-2005-3191 TSLSA-2005-0072  View
355744 68853 CVE-2005-3191 USN-227-1  View
355745 68853 CVE-2005-3191 ADV-2005-2786  View
355746 68853 CVE-2005-3191 ADV-2005-2787  View
355747 68853 CVE-2005-3191 ADV-2005-2788  View
355748 68853 CVE-2005-3191 ADV-2005-2789  View
355749 68853 CVE-2005-3191 ADV-2005-2790  View
355750 68853 CVE-2005-3191 ADV-2005-2856  View
355751 68853 CVE-2005-3191 ADV-2007-2280  View
355752 68853 CVE-2005-3191 xpdf-dctstream-progressive-bo(23443)  View
355753 68853 CVE-2005-3191 xpdf-dctstream-baseline-bo(23444)  View
355754 68853 CVE-2005-3191 https://issues.rpath.com/browse/RPL-1609  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62513 JVNDB-2005-000715 Xpdf の Stream.cc の複数の関数におけるヒープオーバーフローの脆弱性 Xpdf には xpdf/Stream.cc の DCTStream::readBaselineSOF()、DCTStream::readProgressiveSOF() 関数において、PDF ファイルに含まれる numComps の値に対する境界チェックが不適切であるため、メモリ領域にデータをコピーする際にヒープオーバーフローが発生する脆弱性が存在します。 CVE-2005-3191 14395 CVE-2005-3191 68853 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000715.html 2005-12-05 2007-06-28 View