Every CVE Search/ Get API key

CVE-2005-3192

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such...

7.5 HighFix available

CVE-2005-3192 is a high vulnerability (CVSS 7.5) in Xpdf, published December 8, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.14%, the 93rd percentile. Fixed in cups 1.1.23-13.

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Exploit likelihood

6.14%Down 15.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
CVE-2005-3192
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
CVE-2005-3192
Updated
2026-11-02
EUVDEUVD-2005-3191 No score

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
EUVD-2005-3191
Updated
2026-11-03
GitHub AdvisoriesGHSA-xj67-863c-2vj3 No score

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such...

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
GHSA-xj67-863c-2vj3
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
CVE-2005-3192
Updated
2026-11-02
OSVDEBIAN-CVE-2005-3192 No score

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

Record
DEBIAN-CVE-2005-3192
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
Debian:12
before 1.1.23-13
1.1.23-13
cups
Debian:13
before 1.1.23-13
1.1.23-13
cups
Debian:14
before 1.1.23-13
1.1.23-13
libextractor
Debian:12
before 0.5.8-1
0.5.8-1
libextractor
Debian:13
before 0.5.8-1
0.5.8-1
libextractor
Debian:14
before 0.5.8-1
0.5.8-1
poppler
Debian:12
before 0.4.3-2
0.4.3-2
poppler
Debian:13
before 0.4.3-2
0.4.3-2
poppler
Debian:14
before 0.4.3-2
0.4.3-2
xpdf
Debian:12
before 3.01-3
3.01-3
Show 142 moreShow less
Affected packages
PackageAffectedFixed
xpdf
Debian:13
before 3.01-3
3.01-3
xpdf
Debian:14
before 3.01-3
3.01-3
koffice
Debian:3.1
before 1.3.5-4.sarge.3
1.3.5-4.sarge.3
xpdf
Debian:3.0
before 1.00-3.8, plus listed versions
1.00-3.21.00-3.41.00-3.51.00-3.61.00-3.7
1.00-3.8
xpdf
Debian:3.1
before 3.00-13.4, plus listed versions
3.00-133.00-13.13.00-13.23.00-13.3
3.00-13.4
kdegraphics
Debian:3.1
before 4:3.3.2-2sarge3, plus listed versions
4:3.3.2-24:3.3.2-2sarge14:3.3.2-2sarge2
4:3.3.2-2sarge3
libextractor
Debian:3.1
before 0.4.2-2sarge2, plus listed versions
0.4.2-20.4.2-2sarge1
0.4.2-2sarge2
tetex-bin
Debian:3.1
before 2.0.2-30sarge4, plus listed versions
2.0.2-302.0.2-30sarge12.0.2-30sarge22.0.2-30sarge3
2.0.2-30sarge4
tetex-bin
Debian:3.0
before 1.0.7+20011202-7.7, plus listed versions
1.0.7+20011202-7.31.0.7+20011202-7.41.0.7+20011202-7.51.0.7+20011202-7.6
1.0.7+20011202-7.7
gpdf
Debian:3.1
before 2.8.2-1.2sarge2, plus listed versions
2.8.2-1.22.8.2-1.2sarge1
2.8.2-1.2sarge2
cupsys
Debian:3.0
before 1.1.14-5woody14, plus listed versions
1.1.14-5woody101.1.14-5woody121.1.14-5woody13
1.1.14-5woody14
pdfkit.framework
Debian:3.1
before 0.8-2sarge1, plus listed versions
0.8-2
0.8-2sarge1
pdftohtml
Debian:3.1
before 0.36-11sarge1, plus listed versions
0.36-11
0.36-11sarge1
pdftohtml
Debian:3.1
before 0.36-11sarge2, plus listed versions
0.36-110.36-11sarge1
0.36-11sarge2
xpdf
Red Hat:enterprise_linux:3::as
before 1:2.02-9.8
1:2.02-9.8
xpdf-debuginfo
Red Hat:enterprise_linux:3::as
before 1:2.02-9.8
1:2.02-9.8
xpdf
Red Hat:enterprise_linux:3::desktop
before 1:2.02-9.8
1:2.02-9.8
xpdf-debuginfo
Red Hat:enterprise_linux:3::desktop
before 1:2.02-9.8
1:2.02-9.8
xpdf
Red Hat:enterprise_linux:3::es
before 1:2.02-9.8
1:2.02-9.8
xpdf-debuginfo
Red Hat:enterprise_linux:3::es
before 1:2.02-9.8
1:2.02-9.8
xpdf
Red Hat:enterprise_linux:3::ws
before 1:2.02-9.8
1:2.02-9.8
xpdf-debuginfo
Red Hat:enterprise_linux:3::ws
before 1:2.02-9.8
1:2.02-9.8
xpdf
Red Hat:enterprise_linux:4::as
before 1:3.00-11.10
1:3.00-11.10
xpdf-debuginfo
Red Hat:enterprise_linux:4::as
before 1:3.00-11.10
1:3.00-11.10
xpdf
Red Hat:enterprise_linux:4::desktop
before 1:3.00-11.10
1:3.00-11.10
xpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
before 1:3.00-11.10
1:3.00-11.10
xpdf
Red Hat:enterprise_linux:4::es
before 1:3.00-11.10
1:3.00-11.10
xpdf-debuginfo
Red Hat:enterprise_linux:4::es
before 1:3.00-11.10
1:3.00-11.10
xpdf
Red Hat:enterprise_linux:4::ws
before 1:3.00-11.10
1:3.00-11.10
xpdf-debuginfo
Red Hat:enterprise_linux:4::ws
before 1:3.00-11.10
1:3.00-11.10
gpdf
Red Hat:enterprise_linux:4::as
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf
Red Hat:enterprise_linux:4::desktop
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf
Red Hat:enterprise_linux:4::es
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf
Red Hat:enterprise_linux:4::ws
before 0:2.8.2-7.3
0:2.8.2-7.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.8.2-7.3
0:2.8.2-7.3
kdegraphics
Red Hat:enterprise_linux:4::as
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::as
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-devel
Red Hat:enterprise_linux:4::as
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics
Red Hat:enterprise_linux:4::desktop
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::desktop
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-devel
Red Hat:enterprise_linux:4::desktop
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics
Red Hat:enterprise_linux:4::es
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::es
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-devel
Red Hat:enterprise_linux:4::es
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics
Red Hat:enterprise_linux:4::ws
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::ws
before 7:3.3.1-3.6
7:3.3.1-3.6
kdegraphics-devel
Red Hat:enterprise_linux:4::ws
before 7:3.3.1-3.6
7:3.3.1-3.6
cups
Red Hat:enterprise_linux:3::as
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-debuginfo
Red Hat:enterprise_linux:3::as
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-devel
Red Hat:enterprise_linux:3::as
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-libs
Red Hat:enterprise_linux:3::as
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups
Red Hat:enterprise_linux:3::desktop
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-debuginfo
Red Hat:enterprise_linux:3::desktop
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-devel
Red Hat:enterprise_linux:3::desktop
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-libs
Red Hat:enterprise_linux:3::desktop
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups
Red Hat:enterprise_linux:3::es
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-debuginfo
Red Hat:enterprise_linux:3::es
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-devel
Red Hat:enterprise_linux:3::es
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-libs
Red Hat:enterprise_linux:3::es
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups
Red Hat:enterprise_linux:3::ws
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-debuginfo
Red Hat:enterprise_linux:3::ws
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-devel
Red Hat:enterprise_linux:3::ws
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups-libs
Red Hat:enterprise_linux:3::ws
before 1:1.1.17-13.3.34
1:1.1.17-13.3.34
cups
Red Hat:enterprise_linux:4::as
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-debuginfo
Red Hat:enterprise_linux:4::as
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-devel
Red Hat:enterprise_linux:4::as
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-libs
Red Hat:enterprise_linux:4::as
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups
Red Hat:enterprise_linux:4::desktop
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-debuginfo
Red Hat:enterprise_linux:4::desktop
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-devel
Red Hat:enterprise_linux:4::desktop
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-libs
Red Hat:enterprise_linux:4::desktop
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups
Red Hat:enterprise_linux:4::es
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-debuginfo
Red Hat:enterprise_linux:4::es
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-devel
Red Hat:enterprise_linux:4::es
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-libs
Red Hat:enterprise_linux:4::es
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups
Red Hat:enterprise_linux:4::ws
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-debuginfo
Red Hat:enterprise_linux:4::ws
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-devel
Red Hat:enterprise_linux:4::ws
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
cups-libs
Red Hat:enterprise_linux:4::ws
before 1:1.1.22-0.rc1.9.9
1:1.1.22-0.rc1.9.9
tetex
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-afm
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-debuginfo
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-dvips
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-fonts
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-latex
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-xdvi
Red Hat:enterprise_linux:3::as
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-afm
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-debuginfo
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-dvips
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-fonts
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-latex
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-xdvi
Red Hat:enterprise_linux:3::desktop
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-afm
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-debuginfo
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-dvips
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-fonts
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-latex
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-xdvi
Red Hat:enterprise_linux:3::es
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-afm
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-debuginfo
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-dvips
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-fonts
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-latex
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex-xdvi
Red Hat:enterprise_linux:3::ws
before 0:1.0.7-67.9
0:1.0.7-67.9
tetex
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-afm
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-debuginfo
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-doc
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-dvips
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-fonts
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-latex
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-xdvi
Red Hat:enterprise_linux:4::as
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-afm
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-debuginfo
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-doc
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-dvips
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-fonts
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-latex
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-xdvi
Red Hat:enterprise_linux:4::desktop
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-afm
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-debuginfo
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-doc
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-dvips
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-fonts
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-latex
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-xdvi
Red Hat:enterprise_linux:4::es
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-afm
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-debuginfo
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-doc
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-dvips
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-fonts
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-latex
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7
tetex-xdvi
Red Hat:enterprise_linux:4::ws
before 0:2.0.2-22.EL4.7
0:2.0.2-22.EL4.7

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 150 moreShow less
MoveEnter Open