CVE-2005-3193

2005-12-0700:00:00

ubuntu.com

5.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.007 Low

EPSS

Percentile

79.9%

JSON

Heap-based buffer overflow in the JPXStream::readCodestream function in the
JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in
products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5)
libextractor allows user-assisted attackers to cause a denial of service
(heap corruption) and possibly execute arbitrary code via a crafted PDF
file with large size values that cause insufficient memory to be allocated.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu6.10noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu7.04noarchkdegraphics< 3.5.2-0ubuntu6UNKNOWN
ubuntu6.06noarchkoffice< 1.5.0-0ubuntu9.2UNKNOWN
ubuntu6.10noarchkoffice< 1.5.2-0ubuntu2.2UNKNOWN
ubuntu7.04noarchkoffice< 1.6.2-0ubuntu1.1UNKNOWN
ubuntu6.06noarchpdftohtml< 0.36-13UNKNOWN
ubuntu6.10noarchpdftohtml< 0.36-13UNKNOWN
ubuntu7.04noarchpdftohtml< 0.36-13UNKNOWN
ubuntu6.06noarchpoppler< 0.5.1-0ubuntu7.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	6.10	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	7.04	noarch	kdegraphics	< 3.5.2-0ubuntu6	UNKNOWN
ubuntu	6.06	noarch	koffice	< 1.5.0-0ubuntu9.2	UNKNOWN
ubuntu	6.10	noarch	koffice	< 1.5.2-0ubuntu2.2	UNKNOWN
ubuntu	7.04	noarch	koffice	< 1.6.2-0ubuntu1.1	UNKNOWN
ubuntu	6.06	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	6.10	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	7.04	noarch	pdftohtml	< 0.36-13	UNKNOWN
ubuntu	6.06	noarch	poppler	< 0.5.1-0ubuntu7.2	UNKNOWN