CVE-2005-3191
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream:...
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
Exploit likelihood
What each source reports
NVD Score used
5.1
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
CVE-2005-3191- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
CVE-2005-3191- Updated
- 2026-11-02
EUVDEUVD-2005-3190 No score
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
EUVD-2005-3190- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-wc46-2g2w-q2mc No score
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream:...
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
GHSA-wc46-2g2w-q2mc- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
CVE-2005-3191- Updated
- 2026-11-02
OSVDEBIAN-CVE-2005-3191 No score
Multiple heap-based buffer overflows in the (1) DCTStream::readProgressiveSOF and (2) DCTStream::readBaselineSOF functions in the DCT stream parsing code (Stream.cc) in xpdf 3.01 and earlier, as used in products such as (a) Poppler, (b) teTeX, (c) KDE kpdf, (d) pdftohtml, (e) KOffice KWord, (f) CUPS, and (g) libextractor allow user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with an out-of-range number of components (numComps), which is used as an array index.
- Record
DEBIAN-CVE-2005-3191- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
cupsDebian:12 |
before 1.1.23-13 | 1.1.23-13 |
cupsDebian:13 |
before 1.1.23-13 | 1.1.23-13 |
cupsDebian:14 |
before 1.1.23-13 | 1.1.23-13 |
libextractorDebian:12 |
before 0.5.8-1 | 0.5.8-1 |
libextractorDebian:13 |
before 0.5.8-1 | 0.5.8-1 |
libextractorDebian:14 |
before 0.5.8-1 | 0.5.8-1 |
popplerDebian:12 |
before 0.4.2-1.1 | 0.4.2-1.1 |
popplerDebian:13 |
before 0.4.2-1.1 | 0.4.2-1.1 |
popplerDebian:14 |
before 0.4.2-1.1 | 0.4.2-1.1 |
xpdfDebian:12 |
before 3.01-3 | 3.01-3 |
Show 145 moreShow less
| Package | Affected | Fixed |
|---|---|---|
xpdfDebian:13 |
before 3.01-3 | 3.01-3 |
xpdfDebian:14 |
before 3.01-3 | 3.01-3 |
xpdfDebian:3.0 From an advisory covering 8 CVEs |
before 1.00-3.8, plus listed versions 1.00-3.21.00-3.41.00-3.51.00-3.61.00-3.7 |
1.00-3.8 |
xpdfDebian:3.1 From an advisory covering 8 CVEs |
before 3.00-13.4, plus listed versions 3.00-133.00-13.13.00-13.23.00-13.3 |
3.00-13.4 |
kdegraphicsDebian:3.1 From an advisory covering 8 CVEs |
before 4:3.3.2-2sarge3, plus listed versions 4:3.3.2-24:3.3.2-2sarge14:3.3.2-2sarge2 |
4:3.3.2-2sarge3 |
libextractorDebian:3.1 From an advisory covering 9 CVEs |
before 0.4.2-2sarge2, plus listed versions 0.4.2-20.4.2-2sarge1 |
0.4.2-2sarge2 |
tetex-binDebian:3.1 From an advisory covering 8 CVEs |
before 2.0.2-30sarge4, plus listed versions 2.0.2-302.0.2-30sarge12.0.2-30sarge22.0.2-30sarge3 |
2.0.2-30sarge4 |
tetex-binDebian:3.0 From an advisory covering 8 CVEs |
before 1.0.7+20011202-7.7, plus listed versions 1.0.7+20011202-7.31.0.7+20011202-7.41.0.7+20011202-7.51.0.7+20011202-7.6 |
1.0.7+20011202-7.7 |
kofficeDebian:3.1 From an advisory covering 6 CVEs |
before 1:1.3.5-4.sarge.2, plus listed versions 1:1.3.5-41:1.3.5-4.11:1.3.5-4.21:1.3.5-4.31:1.3.5-4.sarge.1 |
1:1.3.5-4.sarge.2 |
gpdfDebian:3.1 From an advisory covering 7 CVEs |
before 2.8.2-1.2sarge2, plus listed versions 2.8.2-1.22.8.2-1.2sarge1 |
2.8.2-1.2sarge2 |
cupsysDebian:3.0 From an advisory covering 8 CVEs |
before 1.1.14-5woody14, plus listed versions 1.1.14-5woody101.1.14-5woody121.1.14-5woody13 |
1.1.14-5woody14 |
pdfkit.frameworkDebian:3.1 From an advisory covering 8 CVEs |
before 0.8-2sarge1, plus listed versions 0.8-2 |
0.8-2sarge1 |
pdftohtmlDebian:3.1 From an advisory covering 7 CVEs |
before 0.36-11sarge1, plus listed versions 0.36-11 |
0.36-11sarge1 |
pdfkit.frameworkDebian:3.1 From an advisory covering 3 CVEs |
before 0.8-2sarge3, plus listed versions 0.8-20.8-2sarge10.8-2sarge2 |
0.8-2sarge3 |
gpdfDebian:3.1 From an advisory covering 5 CVEs |
before 2.8.2-1.2sarge4, plus listed versions 2.8.2-1.22.8.2-1.2sarge12.8.2-1.2sarge22.8.2-1.2sarge3 |
2.8.2-1.2sarge4 |
pdftohtmlDebian:3.1 From an advisory covering 3 CVEs |
before 0.36-11sarge2, plus listed versions 0.36-110.36-11sarge1 |
0.36-11sarge2 |
xpdfDebian:3.1 From an advisory covering 4 CVEs |
before 3.00-13.6, plus listed versions 3.00-133.00-13.13.00-13.23.00-13.33.00-13.43.00-13.5 |
3.00-13.6 |
xpdfRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdf-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdfRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdf-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdfRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdf-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdfRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdf-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 1:2.02-9.8 | 1:2.02-9.8 |
xpdfRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdf-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdfRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdf-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdfRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdf-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdfRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
xpdf-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 1:3.00-11.10 | 1:3.00-11.10 |
gpdfRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdf-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdfRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdf-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdfRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdf-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdfRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
gpdf-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 0:2.8.2-7.3 | 0:2.8.2-7.3 |
kdegraphicsRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-develRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphicsRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-develRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphicsRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-develRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphicsRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
kdegraphics-develRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 7:3.3.1-3.6 | 7:3.3.1-3.6 |
cupsRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-develRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-libsRed Hat:enterprise_linux:3::as From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cupsRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-develRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-libsRed Hat:enterprise_linux:3::desktop From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cupsRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-develRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-libsRed Hat:enterprise_linux:3::es From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cupsRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-develRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cups-libsRed Hat:enterprise_linux:3::ws From an advisory covering 4 CVEs |
before 1:1.1.17-13.3.34 | 1:1.1.17-13.3.34 |
cupsRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-develRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-libsRed Hat:enterprise_linux:4::as From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cupsRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-develRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-libsRed Hat:enterprise_linux:4::desktop From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cupsRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-develRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-libsRed Hat:enterprise_linux:4::es From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cupsRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-develRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
cups-libsRed Hat:enterprise_linux:4::ws From an advisory covering 4 CVEs |
before 1:1.1.22-0.rc1.9.9 | 1:1.1.22-0.rc1.9.9 |
tetexRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-afmRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-dvipsRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-fontsRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-latexRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-xdviRed Hat:enterprise_linux:3::as From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetexRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-afmRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-dvipsRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-fontsRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-latexRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-xdviRed Hat:enterprise_linux:3::desktop From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetexRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-afmRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-dvipsRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-fontsRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-latexRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-xdviRed Hat:enterprise_linux:3::es From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetexRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-afmRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-dvipsRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-fontsRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-latexRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetex-xdviRed Hat:enterprise_linux:3::ws From an advisory covering 8 CVEs |
before 0:1.0.7-67.9 | 0:1.0.7-67.9 |
tetexRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-afmRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-docRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-dvipsRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-fontsRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-latexRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-xdviRed Hat:enterprise_linux:4::as From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetexRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-afmRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-docRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-dvipsRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-fontsRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-latexRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-xdviRed Hat:enterprise_linux:4::desktop From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetexRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-afmRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-docRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-dvipsRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-fontsRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-latexRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-xdviRed Hat:enterprise_linux:4::es From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetexRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-afmRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-docRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-dvipsRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-fontsRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-latexRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
tetex-xdviRed Hat:enterprise_linux:4::ws From an advisory covering 8 CVEs |
before 0:2.0.2-22.EL4.7 | 0:2.0.2-22.EL4.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-3191 is a medium vulnerability (CVSS 5.1) in Xpdf, published December 7, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.08%, the 90th percentile. Fixed in cups 1.1.23-13.
References
securityreason.com/securityalert/234
secunia.com/advisories/17929
secunia.com/advisories/19797
securityreason.com/securityalert/233
debian.org/security/2005/dsa-932
secunia.com/advisories/18349
Show 155 moreShow less
secunia.com/advisories/18147
secunia.com/advisories/18055
kde.org/info/security/advisory-20051207-1.txt
secunia.com/advisories/18503
secunia.com/advisories/18549
kde.org/info/security/advisory-20051207-2.txt
secunia.com/advisories/18679
secunia.com/advisories/18189
secunia.com/advisories/26413
secunia.com/advisories/17940
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9760
exchange.xforce.ibmcloud.com/vulnerabilities/23444
secunia.com/advisories/18303
debian.org/security/2005/dsa-931
secunia.com/advisories/18554
mandriva.com/security/advisories?name=MDKSA-2006:003
bugs.debian.org/cgi-bin/bugreport.cgi?bug=342289
secunia.com/advisories/19230
sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
mandriva.com/security/advisories?name=MDKSA-2006:012
debian.org/security/2006/dsa-962
securitytracker.com/id?1015309
debian.org/security/2005/dsa-937
secunia.com/advisories/18398
securityfocus.com/archive/1/427053/100/0/threaded
lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
debian.org/security/2006/dsa-936
secunia.com/advisories/17916
idefense.com/application/poi/display?id=343&type=vulnerabilities
redhat.com/support/errata/RHSA-2005-840.html
vupen.com/english/advisories/2005/2789
redhat.com/support/errata/RHSA-2005-867.html
secunia.com/advisories/18674
mandriva.com/security/advisories?name=MDKSA-2006:005
secunia.com/advisories/18313
securityfocus.com/bid/15727
issues.rpath.com/browse/RPL-1609
rhn.redhat.com/errata/RHSA-2005-868.html
secunia.com/advisories/18448
secunia.com/advisories/18436
secunia.com/advisories/18428
secunia.com/advisories/18380
gentoo.org/security/en/glsa/glsa-200512-08.xml
redhat.com/archives/fedora-announce-list/2005-December/msg00015.html
secunia.com/advisories/18416
vupen.com/english/advisories/2007/2280
securityfocus.com/bid/15726
gentoo.org/security/en/glsa/glsa-200601-02.xml
redhat.com/archives/fedora-announce-list/2005-December/msg00037.html
secunia.com/advisories/18336
secunia.com/advisories/18061
secunia.com/advisories/18407
secunia.com/advisories/18009
secunia.com/advisories/17908
ubuntulinux.org/usn/usn-227-1
secunia.com/advisories/17897
idefense.com/application/poi/display?id=342&type=vulnerabilities
secunia.com/advisories/18517
secunia.com/advisories/18582
novell.com/linux/security/advisories/2006_02_sr.html
secunia.com/advisories/18534
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
trustix.org/errata/2005/0072
redhat.com/archives/fedora-announce-list/2005-December/msg00016.html
securityfocus.com/archive/1/418883/100/0/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/23443
secunia.com/advisories/18908
secunia.com/advisories/25729
vupen.com/english/advisories/2005/2786
mandriva.com/security/advisories?name=MDKSA-2006:006
vupen.com/english/advisories/2005/2788
secunia.com/advisories/17926
secunia.com/advisories/19798
mandriva.com/security/advisories?name=MDKSA-2006:008
secunia.com/advisories/18191
redhat.com/support/errata/RHSA-2006-0160.html
secunia.com/advisories/17912
mandriva.com/security/advisories?name=MDKSA-2006:010
secunia.com/advisories/17921
debian.org/security/2005/dsa-940
mandriva.com/security/advisories?name=MDKSA-2006:004
vupen.com/english/advisories/2005/2790
secunia.com/advisories/18389
secunia.com/advisories/18192
vupen.com/english/advisories/2005/2856
slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
secunia.com/advisories/19377
securityfocus.com/archive/1/427990/100/0/threaded
debian.org/security/2006/dsa-961
secunia.com/advisories/18675
securitytracker.com/id?1015324
secunia.com/advisories/18913
debian.org/security/2005/dsa-938
novell.com/linux/security/advisories/2005_29_sr.html
vupen.com/english/advisories/2005/2787
redhat.com/support/errata/RHSA-2005-878.html
redhat.com/archives/fedora-announce-list/2005-December/msg00036.html
secunia.com/advisories/17920
debian.org/security/2006/dsa-950
secunia.com/advisories/17955
secunia.com/advisories/17976
secunia.com/advisories/18387
mandriva.com/security/advisories?name=MDKSA-2006:011
secunia.com/advisories/18385
nvd.nist.gov/vuln/detail/CVE-2005-3191
github.com/advisories/GHSA-wc46-2g2w-q2mc
security-tracker.debian.org/tracker/CVE-2005-3191
access.redhat.com/errata/RHSA-2005:840
bugzilla.redhat.com/show_bug.cgi?id=173888
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_840.json
access.redhat.com/security/cve/CVE-2005-3191
bugzilla.redhat.com/show_bug.cgi?id=1617796
cve.org/CVERecord?id=CVE-2005-3191
access.redhat.com/security/cve/CVE-2005-3192
bugzilla.redhat.com/show_bug.cgi?id=1617797
cve.org/CVERecord?id=CVE-2005-3192
nvd.nist.gov/vuln/detail/CVE-2005-3192
access.redhat.com/security/cve/CVE-2005-3193
bugzilla.redhat.com/show_bug.cgi?id=1617798
cve.org/CVERecord?id=CVE-2005-3193
nvd.nist.gov/vuln/detail/CVE-2005-3193
access.redhat.com/security/cve/CVE-2005-3624
bugzilla.redhat.com/show_bug.cgi?id=1617826
cve.org/CVERecord?id=CVE-2005-3624
nvd.nist.gov/vuln/detail/CVE-2005-3624
access.redhat.com/security/cve/CVE-2005-3625
bugzilla.redhat.com/show_bug.cgi?id=1617827
cve.org/CVERecord?id=CVE-2005-3625
nvd.nist.gov/vuln/detail/CVE-2005-3625
access.redhat.com/security/cve/CVE-2005-3626
bugzilla.redhat.com/show_bug.cgi?id=1617828
cve.org/CVERecord?id=CVE-2005-3626
nvd.nist.gov/vuln/detail/CVE-2005-3626
access.redhat.com/security/cve/CVE-2005-3627
bugzilla.redhat.com/show_bug.cgi?id=1617829
cve.org/CVERecord?id=CVE-2005-3627
nvd.nist.gov/vuln/detail/CVE-2005-3627
access.redhat.com/security/cve/CVE-2005-3628
bugzilla.redhat.com/show_bug.cgi?id=1617830
cve.org/CVERecord?id=CVE-2005-3628
nvd.nist.gov/vuln/detail/CVE-2005-3628
access.redhat.com/errata/RHSA-2005:867
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=175100
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_867.json
access.redhat.com/errata/RHSA-2005:868
bugzilla.redhat.com/show_bug.cgi?id=175105
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_868.json
access.redhat.com/errata/RHSA-2005:878
bugzilla.redhat.com/show_bug.cgi?id=175645
security.access.redhat.com/data/csaf/v2/advisories/2005/rhsa-2005_878.json
access.redhat.com/errata/RHSA-2006:0160
bugzilla.redhat.com/show_bug.cgi?id=175109
bugzilla.redhat.com/show_bug.cgi?id=177127
security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0160.json