CVE-2005-3192: xpdf

CVSS: 7.5v2.0HighModified

AliasesDEBIAN-CVE-2005-3192

Published 08-12-2005Last modified 07-08-2024

Some data may be incomplete

7 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2005-3192 is a high (CVSS 7.5) vulnerability in xpdf. EPSS estimates a 6.14% chance of exploitation in the next 30 days, higher than 93.3% of scored vulnerabilities.

Overall risk

31/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.5/10

010

High · v2.0 (NVD)

EPSS score

6.14%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 15

DSA-1019-1 DSA-931-1 DSA-932-1 DSA-936-1 DSA-937-1 DSA-940-1+9 more

Timeline

08-12-2005
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

CVSS metrics

1 score · 1 source · 1 version

v2.07.5

EPSS trend

Probability

6.14%

Chance of exploitation in the next 30 days

Percentile

93%

Versus all other CVEs

30-day change

0.00 pp

From 6.14% on 18-09-2026

18-09-202618-10-2026

EPSS score

6.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Debian4 products

cups< 1.1.23-13
libextractor< 0.5.8-1
poppler< 0.4.3-2
xpdf< 3.01-3

Xpdf1 product

xpdf3.0.1

2 vendors · 5 products

References

106 links

secunia.com/advisories/17929Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19797Third Party AdvisoryX Refsource SECUNIA
exchange.xforce.ibmcloud.com/vulnerabilities/23442VDB EntryX Refsource XF
www.debian.org/security/2005/dsa-932Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18349Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18055Third Party AdvisoryX Refsource SECUNIAVendor Advisory
scary.beasts.org/security/CESA-2005-003.txtX Refsource MISC
www.kde.org/info/security/advisory-20051207-1.txtX Refsource CONFIRM
secunia.com/advisories/18503Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10914VDB EntrySignatureX Refsource OVAL

Show all 100 references

secunia.com/advisories/18549Third Party AdvisoryX Refsource SECUNIA
www.kde.org/info/security/advisory-20051207-2.txtX Refsource CONFIRM
secunia.com/advisories/18679Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18189Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/26413Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17940Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18303Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2005/dsa-931Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/18554Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:003Vendor AdvisoryX Refsource MANDRIVA
bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289X Refsource MISC
secunia.com/advisories/19230Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1Vendor AdvisoryX Refsource SUNALERT
www.debian.org/security/2006/dsa-962Vendor AdvisoryX Refsource DEBIAN
securitytracker.com/id?1015309VDB EntryX Refsource SECTRACK
secunia.com/advisories/18398Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/427053/100/0/threadedVendor AdvisoryX Refsource FEDORA
lists.suse.com/archive/suse-security-announce/2006-Jan/0001.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2006/dsa-936Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/17916Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2005-840.htmlVendor AdvisoryX Refsource REDHATPatch
www.vupen.com/english/advisories/2005/2789VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2005-867.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/18674Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2006:005Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/18313Third Party AdvisoryX Refsource SECUNIAVendor Advisory
issues.rpath.com/browse/RPL-1609X Refsource CONFIRM
rhn.redhat.com/errata/RHSA-2005-868.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/18448Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18436Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18428Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18380Third Party AdvisoryX Refsource SECUNIA
www.gentoo.org/security/en/glsa/glsa-200512-08.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/archives/fedora-announce-list/2005-December/msg00015.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/18416Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2007/2280VDB EntryX Refsource VUPEN
www.gentoo.org/security/en/glsa/glsa-200601-02.xmlVendor AdvisoryX Refsource GENTOO
www.redhat.com/archives/fedora-announce-list/2005-December/msg00037.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/18336Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18061Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18407Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18009Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/17908Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.ubuntulinux.org/usn/usn-227-1Vendor AdvisoryX Refsource UBUNTU
secunia.com/advisories/18517Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/18582Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2006_02_sr.htmlVendor AdvisoryX Refsource SUSE
secunia.com/advisories/18534Third Party AdvisoryX Refsource SECUNIA
www.idefense.com/application/poi/display?id=344&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683Vendor AdvisoryX Refsource SLACKWARE
www.trustix.org/errata/2005/0072/Vendor AdvisoryX Refsource TRUSTIX
www.redhat.com/archives/fedora-announce-list/2005-December/msg00016.htmlVendor AdvisoryX Refsource FEDORA
www.securityfocus.com/archive/1/418883/100/0/threadedMailing ListX Refsource BUGTRAQ
secunia.com/advisories/18908Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/25729Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2005/2786VDB EntryX Refsource VUPEN
www.mandriva.com/security/advisories?name=MDKSA-2006:006Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2005/2788VDB EntryX Refsource VUPEN
secunia.com/advisories/17926Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/19798Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2005/2755VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/15725VDB EntryX Refsource BIDPatch
www.mandriva.com/security/advisories?name=MDKSA-2006:008Vendor AdvisoryX Refsource MANDRIVA
secunia.com/advisories/18191Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.redhat.com/support/errata/RHSA-2006-0160.htmlVendor AdvisoryX Refsource REDHAT
secunia.com/advisories/17912Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:010Vendor AdvisoryX Refsource MANDRAKE
secunia.com/advisories/17921Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.mandriva.com/security/advisories?name=MDKSA-2006:004Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2005/2790VDB EntryX Refsource VUPEN
secunia.com/advisories/18389Third Party AdvisoryX Refsource SECUNIAVendor Advisory
secunia.com/advisories/18192Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.vupen.com/english/advisories/2005/2856VDB EntryX Refsource VUPEN
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747Vendor AdvisoryX Refsource SLACKWARE
secunia.com/advisories/19377Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/427990/100/0/threadedVendor AdvisoryX Refsource FEDORA
www.debian.org/security/2006/dsa-961Vendor AdvisoryX Refsource DEBIAN
securityreason.com/securityalert/235Third Party AdvisoryX Refsource SREASON
secunia.com/advisories/18675Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1015324VDB EntryX Refsource SECTRACK
secunia.com/advisories/18913Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2005_29_sr.htmlVendor AdvisoryX Refsource SUSE
www.debian.org/security/2006/dsa-937Vendor AdvisoryX Refsource DEBIAN
www.vupen.com/english/advisories/2005/2787VDB EntryX Refsource VUPEN
www.redhat.com/support/errata/RHSA-2005-878.htmlVendor AdvisoryX Refsource REDHAT
www.redhat.com/archives/fedora-announce-list/2005-December/msg00036.htmlVendor AdvisoryX Refsource FEDORA
secunia.com/advisories/17920Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.debian.org/security/2006/dsa-950Vendor AdvisoryX Refsource DEBIAN
secunia.com/advisories/17955Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/17897/Third Party AdvisoryX Refsource SECUNIAPatchVendor Advisory

Showing 100 of 106. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities