CVE-2005-3192
Fixed in a distro release EPSS 6%
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.23-13 |
| Debian 12 | libextractor | 0.5.8-1 |
| Debian 12 | poppler | 0.4.3-2 |
| Debian 12 | xpdf | 3.01-3 |
| Debian 13 | cups | 1.1.23-13 |
| Debian 13 | libextractor | 0.5.8-1 |
| Debian 13 | poppler | 0.4.3-2 |
| Debian 13 | xpdf | 3.01-3 |
| Debian 14 | cups | 1.1.23-13 |
| Debian 14 | libextractor | 0.5.8-1 |
| Debian 14 | poppler | 0.4.3-2 |
| Debian 14 | xpdf | 3.01-3 |
| Debian 3.0 | cupsys | 1.1.14-5woody14 |
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.7 |
| Debian 3.0 | xpdf | 1.00-3.8 |
| Debian 3.1 | gpdf | 2.8.2-1.2sarge2 |
| Debian 3.1 | kdegraphics | 4:3.3.2-2sarge3 |
| Debian 3.1 | koffice | 1.3.5-4.sarge.3 |
| Debian 3.1 | libextractor | 0.4.2-2sarge2 |
| Debian 3.1 | pdfkit.framework | 0.8-2sarge1 |
| Debian 3.1 | pdftohtml | 0.36-11sarge1 |
| Debian 3.1 | pdftohtml | 0.36-11sarge2 |
| Debian 3.1 | tetex-bin | 2.0.2-30sarge4 |
| Debian 3.1 | xpdf | 3.00-13.4 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.34 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.9 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-9.8 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-9.8 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.9 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-7.3 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-7.3 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-3.6 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.EL4.7 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-11.10 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-11.10 |