Back to search
CVE-2005-3193
Published: Dec 7, 2005
Modified: Aug 7, 2024
PUBLISHED
Description
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
17959
third-party-advisory
x_refsource_SECUNIA
17929
third-party-advisory
x_refsource_SECUNIA
19797
third-party-advisory
x_refsource_SECUNIA
DSA-932
vendor-advisory
x_refsource_DEBIAN
18349
third-party-advisory
x_refsource_SECUNIA
18147
third-party-advisory
x_refsource_SECUNIA
18055
third-party-advisory
x_refsource_SECUNIA
http://www.kde.org/info/security/advisory-20051207-1.txt
x_refsource_CONFIRM
http://www.kde.org/info/security/advisory-20051207-2.txt
x_refsource_CONFIRM
18679
third-party-advisory
x_refsource_SECUNIA
18189
third-party-advisory
x_refsource_SECUNIA
26413
third-party-advisory
x_refsource_SECUNIA
17940
third-party-advisory
x_refsource_SECUNIA
18303
third-party-advisory
x_refsource_SECUNIA
DSA-931
vendor-advisory
x_refsource_DEBIAN
18554
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:003
vendor-advisory
x_refsource_MANDRIVA
19230
third-party-advisory
x_refsource_SECUNIA
102972
vendor-advisory
x_refsource_SUNALERT
MDKSA-2006:012
vendor-advisory
x_refsource_MANDRIVA
DSA-962
vendor-advisory
x_refsource_DEBIAN
FEDORA-2005-1171
vendor-advisory
x_refsource_FEDORA
1015309
vdb-entry
x_refsource_SECTRACK
DSA-937
vendor-advisory
x_refsource_DEBIAN
18398
third-party-advisory
x_refsource_SECUNIA
FLSA-2006:176751
vendor-advisory
x_refsource_FEDORA
15721
vdb-entry
x_refsource_BID
SUSE-SA:2006:001
vendor-advisory
x_refsource_SUSE
DSA-936
vendor-advisory
x_refsource_DEBIAN
17916
third-party-advisory
x_refsource_SECUNIA
236
third-party-advisory
x_refsource_SREASON
GLSA-200603-02
vendor-advisory
x_refsource_GENTOO
RHSA-2005:840
vendor-advisory
x_refsource_REDHAT
ADV-2005-2789
vdb-entry
x_refsource_VUPEN
RHSA-2005:867
vendor-advisory
x_refsource_REDHAT
18674
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:005
vendor-advisory
x_refsource_MANDRIVA
18313
third-party-advisory
x_refsource_SECUNIA
https://issues.rpath.com/browse/RPL-1609
x_refsource_CONFIRM
RHSA-2005:868
vendor-advisory
x_refsource_REDHAT
18448
third-party-advisory
x_refsource_SECUNIA
18380
third-party-advisory
x_refsource_SECUNIA
GLSA-200512-08
vendor-advisory
x_refsource_GENTOO
FEDORA-2005-1126
vendor-advisory
x_refsource_FEDORA
18416
third-party-advisory
x_refsource_SECUNIA
FEDORA-2005-1132
vendor-advisory
x_refsource_FEDORA
ADV-2007-2280
vdb-entry
x_refsource_VUPEN
GLSA-200601-02
vendor-advisory
x_refsource_GENTOO
19125
third-party-advisory
x_refsource_SECUNIA
xpdf-jpx-stream-bo(23441)
vdb-entry
x_refsource_XF
FEDORA-2005-1142
vendor-advisory
x_refsource_FEDORA
18336
third-party-advisory
x_refsource_SECUNIA
18061
third-party-advisory
x_refsource_SECUNIA
18407
third-party-advisory
x_refsource_SECUNIA
18009
third-party-advisory
x_refsource_SECUNIA
USN-227-1
vendor-advisory
x_refsource_UBUNTU
17897
third-party-advisory
x_refsource_SECUNIA
18517
third-party-advisory
x_refsource_SECUNIA
18582
third-party-advisory
x_refsource_SECUNIA
18534
third-party-advisory
x_refsource_SECUNIA
SSA:2006-045-09
vendor-advisory
x_refsource_SLACKWARE
TSLSA-2005-0072
vendor-advisory
x_refsource_TRUSTIX
18520
third-party-advisory
x_refsource_SECUNIA
FEDORA-2005-1127
vendor-advisory
x_refsource_FEDORA
20051207 [KDE Security Advisory] multiple buffer overflows in kpdf/koffice
mailing-list
x_refsource_BUGTRAQ
18908
third-party-advisory
x_refsource_SECUNIA
25729
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:006
vendor-advisory
x_refsource_MANDRIVA
17956
third-party-advisory
x_refsource_SECUNIA
17926
third-party-advisory
x_refsource_SECUNIA
19798
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:008
vendor-advisory
x_refsource_MANDRIVA
18191
third-party-advisory
x_refsource_SECUNIA
RHSA-2006:0160
vendor-advisory
x_refsource_REDHAT
17912
third-party-advisory
x_refsource_SECUNIA
MDKSA-2006:010
vendor-advisory
x_refsource_MANDRAKE
DSA-940
vendor-advisory
x_refsource_DEBIAN
MDKSA-2006:004
vendor-advisory
x_refsource_MANDRIVA
oval:org.mitre.oval:def:11440
vdb-entry
signature
x_refsource_OVAL
ADV-2005-2790
vdb-entry
x_refsource_VUPEN
20051205 Multiple Vendor xpdf JPX Stream Reader Heap Overflow Vulnerability
third-party-advisory
x_refsource_IDEFENSE
18389
third-party-advisory
x_refsource_SECUNIA
18192
third-party-advisory
x_refsource_SECUNIA
ADV-2005-2856
vdb-entry
x_refsource_VUPEN
SSA:2006-045-04
vendor-advisory
x_refsource_SLACKWARE
19377
third-party-advisory
x_refsource_SECUNIA
FLSA:175404
vendor-advisory
x_refsource_FEDORA
DSA-961
vendor-advisory
x_refsource_DEBIAN
18675
third-party-advisory
x_refsource_SECUNIA
1015324
vdb-entry
x_refsource_SECTRACK
18913
third-party-advisory
x_refsource_SECUNIA
DSA-938
vendor-advisory
x_refsource_DEBIAN
SUSE-SR:2005:029
vendor-advisory
x_refsource_SUSE
ADV-2005-2787
vdb-entry
x_refsource_VUPEN
RHSA-2005:878
vendor-advisory
x_refsource_REDHAT
FEDORA-2005-1141
vendor-advisory
x_refsource_FEDORA
17920
third-party-advisory
x_refsource_SECUNIA
DSA-950
vendor-advisory
x_refsource_DEBIAN
17955
third-party-advisory
x_refsource_SECUNIA
17976
third-party-advisory
x_refsource_SECUNIA
18387
third-party-advisory
x_refsource_SECUNIA
FEDORA-2005-1125
vendor-advisory
x_refsource_FEDORA
MDKSA-2006:011
vendor-advisory
x_refsource_MANDRIVA
18385
third-party-advisory
x_refsource_SECUNIA
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now