CVE-2005-3193

2005-12-0700:03:00

Debian Security Bug Tracker

security-tracker.debian.org

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

EPSS

0.007

Percentile

79.9%

JSON

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

OSVersionArchitecturePackageVersionFilename
Debian12allcups< 1.1.23-13cups_1.1.23-13_all.deb
Debian11allcups< 1.1.23-13cups_1.1.23-13_all.deb
Debian999allcups< 1.1.23-13cups_1.1.23-13_all.deb
Debian13allcups< 1.1.23-13cups_1.1.23-13_all.deb
Debian12alllibextractor< 0.5.8-1libextractor_0.5.8-1_all.deb
Debian11alllibextractor< 0.5.8-1libextractor_0.5.8-1_all.deb
Debian999alllibextractor< 0.5.8-1libextractor_0.5.8-1_all.deb
Debian13alllibextractor< 0.5.8-1libextractor_0.5.8-1_all.deb
Debian12allpoppler< 0.4.2-1.1poppler_0.4.2-1.1_all.deb
Debian11allpoppler< 0.4.2-1.1poppler_0.4.2-1.1_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	12	all	cups	< 1.1.23-13	cups_1.1.23-13_all.deb
Debian	11	all	cups	< 1.1.23-13	cups_1.1.23-13_all.deb
Debian	999	all	cups	< 1.1.23-13	cups_1.1.23-13_all.deb
Debian	13	all	cups	< 1.1.23-13	cups_1.1.23-13_all.deb
Debian	12	all	libextractor	< 0.5.8-1	libextractor_0.5.8-1_all.deb
Debian	11	all	libextractor	< 0.5.8-1	libextractor_0.5.8-1_all.deb
Debian	999	all	libextractor	< 0.5.8-1	libextractor_0.5.8-1_all.deb
Debian	13	all	libextractor	< 0.5.8-1	libextractor_0.5.8-1_all.deb
Debian	12	all	poppler	< 0.4.2-1.1	poppler_0.4.2-1.1_all.deb
Debian	11	all	poppler	< 0.4.2-1.1	poppler_0.4.2-1.1_all.deb