cbcvebase.
CVE-2005-3193
published 2005-12-07

CVE-2005-3193: Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in…

PriorityP427medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EPSS
4.08%
89.6th percentile
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

Affected

35 ranges· showing 25
VendorProductVersion rangeFixed in
applecups>= 0 < 1.1.23-131.1.23-13
applecups>= 0 < 1.1.23-131.1.23-13
applecups>= 0 < 1.1.23-131.1.23-13
applecups>= 0 < 1.1.23-131.1.23-13
debiancups< cups 1.1.23-13 (bookworm)cups 1.1.23-13 (bookworm)
debianlibextractor< cups 1.1.23-13 (bookworm)cups 1.1.23-13 (bookworm)
debianpoppler< cups 1.1.23-13 (bookworm)cups 1.1.23-13 (bookworm)
debianxpdf< cups 1.1.23-13 (bookworm)cups 1.1.23-13 (bookworm)
freedesktoppoppler>= 0 < 0.4.2-1.10.4.2-1.1
freedesktoppoppler>= 0 < 0.4.2-1.10.4.2-1.1
freedesktoppoppler>= 0 < 0.4.2-1.10.4.2-1.1
freedesktoppoppler>= 0 < 0.4.2-1.10.4.2-1.1
gnulibextractor>= 0 < 0.5.8-10.5.8-1
gnulibextractor>= 0 < 0.5.8-10.5.8-1
gnulibextractor>= 0 < 0.5.8-10.5.8-1
gnulibextractor>= 0 < 0.5.8-10.5.8-1
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——
xpdfxpdf——

CVSS provenance

nvdv2.05.1MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
osv5.1MEDIUM
vendor_debian5.1LOW
vendor_redhat5.1MEDIUM
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.