CVE-2005-3192

2005-12-0800:00:00

ubuntu.com

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.184 Low

EPSS

Percentile

96.2%

JSON

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as
used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4)
pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote
attackers to execute arbitrary code via a PDF file with an out-of-range
numComps (number of components) field.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchgpdf< 2.10.0-2UNKNOWN
ubuntu6.10noarchgpdf< 2.10.0-2UNKNOWN
ubuntu6.06noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu6.10noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu7.04noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu6.06noarchpoppler< 0.5.1-0ubuntu7.2UNKNOWN
ubuntu6.10noarchpoppler< 0.5.4-0ubuntu4.2UNKNOWN
ubuntu7.04noarchpoppler< 0.5.4-0ubuntu8.1UNKNOWN
ubuntu6.06noarchtetex-bin< 3.0-13ubuntu6UNKNOWN
ubuntu6.10noarchtetex-bin< 3.0-13ubuntu6UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	gpdf	< 2.10.0-2	UNKNOWN
ubuntu	6.10	noarch	gpdf	< 2.10.0-2	UNKNOWN
ubuntu	6.06	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	6.10	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	7.04	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	6.06	noarch	poppler	< 0.5.1-0ubuntu7.2	UNKNOWN
ubuntu	6.10	noarch	poppler	< 0.5.4-0ubuntu4.2	UNKNOWN
ubuntu	7.04	noarch	poppler	< 0.5.4-0ubuntu8.1	UNKNOWN
ubuntu	6.06	noarch	tetex-bin	< 3.0-13ubuntu6	UNKNOWN
ubuntu	6.10	noarch	tetex-bin	< 3.0-13ubuntu6	UNKNOWN