CVE-2005-3192 PUBLISHED CVSS 7.5 HIGH

Heap-based buffer overflow in the StreamPredictor function in Xpdf 3.01, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, and (4) pdftohtml, (5) KOffice KWord, (6) CUPS, and (7) libextractor allows remote attackers to execute arbitrary code via a PDF file with an out-of-range numComps (number of components) field.

EPSS 12.28% · 93.8th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
12.28%
93.8th percentile

Affected Products

VendorProductVersions
n/an/an/a
xpdfxpdf3.0.1

Timeline

References

…and 95 more

Open in Interactive Console →