Lucene search

[email protected]NVD:CVE-2005-3193

HistoryDec 07, 2005 - 12:03 a.m.

CVE-2005-3193

2005-12-0700:03:00

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.007

Percentile

79.9%

JSON

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

Affected configurations

Nvd

Node

xpdfxpdfMatch0.90

xpdfxpdfMatch0.91

xpdfxpdfMatch0.92

xpdfxpdfMatch0.93

xpdfxpdfMatch1.0

xpdfxpdfMatch1.0a

xpdfxpdfMatch1.1

xpdfxpdfMatch2.0

xpdfxpdfMatch2.1

xpdfxpdfMatch2.2

xpdfxpdfMatch2.3

xpdfxpdfMatch3.0

xpdfxpdfMatch3.0.1

xpdfxpdfMatch3.0_pl2

xpdfxpdfMatch3.0_pl3

VendorProductVersionCPE
xpdfxpdf0.90cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*
xpdfxpdf0.91cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*
xpdfxpdf0.92cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*
xpdfxpdf0.93cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*
xpdfxpdf1.0cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*
xpdfxpdf1.0acpe:2.3:a:xpdf:xpdf:1.0a:*:*:*:*:*:*:*
xpdfxpdf1.1cpe:2.3:a:xpdf:xpdf:1.1:*:*:*:*:*:*:*
xpdfxpdf2.0cpe:2.3:a:xpdf:xpdf:2.0:*:*:*:*:*:*:*
xpdfxpdf2.1cpe:2.3:a:xpdf:xpdf:2.1:*:*:*:*:*:*:*
xpdfxpdf2.2cpe:2.3:a:xpdf:xpdf:2.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
xpdf	xpdf	0.90	cpe:2.3:a:xpdf:xpdf:0.90:::::::*
xpdf	xpdf	0.91	cpe:2.3:a:xpdf:xpdf:0.91:::::::*
xpdf	xpdf	0.92	cpe:2.3:a:xpdf:xpdf:0.92:::::::*
xpdf	xpdf	0.93	cpe:2.3:a:xpdf:xpdf:0.93:::::::*
xpdf	xpdf	1.0	cpe:2.3:a:xpdf:xpdf:1.0:::::::*
xpdf	xpdf	1.0a	cpe:2.3:a:xpdf:xpdf:1.0a:::::::*
xpdf	xpdf	1.1	cpe:2.3:a:xpdf:xpdf:1.1:::::::*
xpdf	xpdf	2.0	cpe:2.3:a:xpdf:xpdf:2.0:::::::*
xpdf	xpdf	2.1	cpe:2.3:a:xpdf:xpdf:2.1:::::::*
xpdf	xpdf	2.2	cpe:2.3:a:xpdf:xpdf:2.2:::::::*

Rows per page:

1-10 of 151

References

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt

ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

rhn.redhat.com/errata/RHSA-2005-868.html

secunia.com/advisories/17897

secunia.com/advisories/17912

secunia.com/advisories/17916

secunia.com/advisories/17920

secunia.com/advisories/17926

secunia.com/advisories/17929

secunia.com/advisories/17940

secunia.com/advisories/17955

secunia.com/advisories/17956

secunia.com/advisories/17959

secunia.com/advisories/17976

secunia.com/advisories/18009

secunia.com/advisories/18055

secunia.com/advisories/18061

secunia.com/advisories/18147

secunia.com/advisories/18189

secunia.com/advisories/18191

secunia.com/advisories/18192

secunia.com/advisories/18303

secunia.com/advisories/18313

secunia.com/advisories/18336

secunia.com/advisories/18349

secunia.com/advisories/18380

secunia.com/advisories/18385

secunia.com/advisories/18387

secunia.com/advisories/18389

secunia.com/advisories/18398

secunia.com/advisories/18407

secunia.com/advisories/18416

secunia.com/advisories/18448

secunia.com/advisories/18517

secunia.com/advisories/18520

secunia.com/advisories/18534

secunia.com/advisories/18554

secunia.com/advisories/18582

secunia.com/advisories/18674

secunia.com/advisories/18675

secunia.com/advisories/18679

secunia.com/advisories/18908

secunia.com/advisories/18913

secunia.com/advisories/19125

secunia.com/advisories/19230

secunia.com/advisories/19377

secunia.com/advisories/19797

secunia.com/advisories/19798

secunia.com/advisories/25729

secunia.com/advisories/26413

securityreason.com/securityalert/236

securitytracker.com/id?1015309

securitytracker.com/id?1015324

slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1

www.debian.org/security/2005/dsa-931

www.debian.org/security/2005/dsa-932

www.debian.org/security/2005/dsa-937

www.debian.org/security/2005/dsa-938

www.debian.org/security/2005/dsa-940

www.debian.org/security/2006/dsa-936

www.debian.org/security/2006/dsa-950

www.debian.org/security/2006/dsa-961

www.debian.org/security/2006/dsa-962

www.gentoo.org/security/en/glsa/glsa-200512-08.xml

www.gentoo.org/security/en/glsa/glsa-200601-02.xml

www.gentoo.org/security/en/glsa/glsa-200603-02.xml

www.idefense.com/application/poi/display?id=345&type=vulnerabilities&flashstatus=true

www.kde.org/info/security/advisory-20051207-1.txt

www.kde.org/info/security/advisory-20051207-2.txt

www.mandriva.com/security/advisories?name=MDKSA-2006:003

www.mandriva.com/security/advisories?name=MDKSA-2006:004

www.mandriva.com/security/advisories?name=MDKSA-2006:005

www.mandriva.com/security/advisories?name=MDKSA-2006:006

www.mandriva.com/security/advisories?name=MDKSA-2006:008

www.mandriva.com/security/advisories?name=MDKSA-2006:010

www.mandriva.com/security/advisories?name=MDKSA-2006:011

www.mandriva.com/security/advisories?name=MDKSA-2006:012

www.novell.com/linux/security/advisories/2005_29_sr.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00014.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00022.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.html

www.redhat.com/archives/fedora-announce-list/2005-December/msg00073.html

www.redhat.com/archives/fedora-announce-list/2006-January/msg00043.html

www.redhat.com/support/errata/RHSA-2005-840.html

www.redhat.com/support/errata/RHSA-2005-867.html

www.redhat.com/support/errata/RHSA-2005-878.html

www.redhat.com/support/errata/RHSA-2006-0160.html

www.securityfocus.com/archive/1/418883/100/0/threaded

www.securityfocus.com/archive/1/427053/100/0/threaded

www.securityfocus.com/archive/1/427990/100/0/threaded

www.securityfocus.com/bid/15721

www.trustix.org/errata/2005/0072/

www.ubuntulinux.org/usn/usn-227-1

www.vupen.com/english/advisories/2005/2787

www.vupen.com/english/advisories/2005/2789

www.vupen.com/english/advisories/2005/2790

www.vupen.com/english/advisories/2005/2856

www.vupen.com/english/advisories/2007/2280

exchange.xforce.ibmcloud.com/vulnerabilities/23441

issues.rpath.com/browse/RPL-1609

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11440

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.6

Confidence

Low

EPSS

0.007

Percentile

79.9%

JSON

Related for NVD:CVE-2005-3193

nessus44 openvas28 securityvulns3 slackware3 ubuntucve1 cvelist1 gentoo3 altlinux1 debiancve1 cve1 ubuntu1 redhat5 centos8 oraclelinux1 debian14 osv3 suse1