PT-2005-1035 · Foxtail Technology+6 · Xpdf+9

Infamous41Md · Published 2005-12-06 · Updated 2018-10-19 · CVE-2005-3192

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions kdegraphics versions prior to 3.4.3-r3 Xpdf version 3.01 pdftohtml (affected versions not specified)

Description The issue involves multiple vulnerabilities in the kdegraphics package and pdftohtml, which can be exploited remotely to compromise the confidentiality, integrity, and availability of protected information. A heap-based buffer overflow in the StreamPredictor function in Xpdf, also used in products like Poppler, teTeX, KDE kpdf, pdftohtml, KOffice KWord, CUPS, and libextractor, allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps field.

Recommendations For kdegraphics versions prior to 3.4.3-r3, update to version 3.4.3-r3 or later. For Xpdf version 3.01, consider disabling the StreamPredictor function until a patch is available. For pdftohtml, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-03279

BDU:2015-09484

CVE-2005-3192

DSA-1019-1

DSA-931-1

DSA-932-1

DSA-936-1

DSA-937-1

DSA-940-1

DSA-950-1

DSA-961-1

DSA-962-1

DSA-983-1

RHSA-2005:840

RHSA-2005:867

RHSA-2005:868

RHSA-2005:878

RHSA-2005_840

RHSA-2005_867

RHSA-2005_868

RHSA-2005_878

RHSA-2006:0160

RHSA-2006_0160

Affected Products

Cups

Office Word

Kpdf

Poppler

Red Hat

Xpdf

Kdegraphics

Libextractor

Pdftohtml

Tetex

References · 149

• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDKSA-2006:010 · Vendor Advisory
• http://redhat.com/archives/fedora-announce-list/2005-December/msg00036.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3627 · Security Note
• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-03279 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2006:005 · Vendor Advisory
• http://novell.com/linux/security/advisories/2006_02_sr.html · Vendor Advisory
• http://idefense.com/application/poi/display?id=344&type=vulnerabilities · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3626 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2006:011 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2005-868.html · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3624 · Security Note
• http://secunia.com/advisories/17976 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2005-878.html · Vendor Advisory