Debian Security Bug TrackerDEBIANCVE:CVE-2005-3191CVE-2005-3191
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.4%
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, © KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | cups | < 1.1.23-13 | cups_1.1.23-13_all.deb |
| Debian | 11 | all | cups | < 1.1.23-13 | cups_1.1.23-13_all.deb |
| Debian | 10 | all | cups | < 1.1.23-13 | cups_1.1.23-13_all.deb |
| Debian | 999 | all | cups | < 1.1.23-13 | cups_1.1.23-13_all.deb |
| Debian | 13 | all | cups | < 1.1.23-13 | cups_1.1.23-13_all.deb |
| Debian | 12 | all | libextractor | < 0.5.8-1 | libextractor_0.5.8-1_all.deb |
| Debian | 11 | all | libextractor | < 0.5.8-1 | libextractor_0.5.8-1_all.deb |
| Debian | 10 | all | libextractor | < 0.5.8-1 | libextractor_0.5.8-1_all.deb |
| Debian | 999 | all | libextractor | < 0.5.8-1 | libextractor_0.5.8-1_all.deb |
| Debian | 13 | all | libextractor | < 0.5.8-1 | libextractor_0.5.8-1_all.deb |
Related
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
0.006 Low
EPSS
Percentile
78.4%