CVE-2005-3192: Buffer Overflow
Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3192?
CVE-2005-3192 has a high severity due to its potential for remote code execution.
How do I fix CVE-2005-3192?
To fix CVE-2005-3192, upgrade to a version of Xpdf that is not vulnerable, specifically version 3.01 or later.
Who is affected by CVE-2005-3192?
CVE-2005-3192 affects any software utilizing Xpdf version 3.0.1, including Poppler and KDE kpdf.
What are the consequences of exploiting CVE-2005-3192?
Exploiting CVE-2005-3192 could allow an attacker to execute arbitrary code on the affected system.
Is there a patch available for CVE-2005-3192?
Yes, a patch for CVE-2005-3192 can be found in updates for affected software packages.