Novell Home

CVE-2005-3193

Common Vulnerabilities and Exposures

[Previous] [Index] [Next]

Upstream information

CVE-2005-3193 at MITRE

Description

Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and earlier, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted attackers to cause a denial of service (heap corruption) and possibly execute arbitrary code via a crafted PDF file with large size values that cause insufficient memory to be allocated.

NVD CVSS v2 Base Score: 5.1 (AV:N/AC:H/Au:N/C:P/I:P/A:P)

Novell/SUSE information

Novell Bugzilla entry: 137156, 142106

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE LINUX 10.0
  • libextractor >= 0.5.2-3.2
  • libextractor-devel >= 0.5.2-3.2
SUSE LINUX 10.0
  • poppler >= 0.4.2-3.2
  • poppler-devel >= 0.4.2-3.2
SuSE Linux Desktop 1.0
  • koffice-wordprocessing >= 1.2.1-210
Builds
SUSE LINUX 10.0
  • xpdf >= 3.00-92.2
SuSE Linux 9.0 for AMD64
SuSE Linux 9.0 for IA32
  • xpdf >= 2.02pl1-150
SUSE LINUX 9.1 for IA32
SUSE LINUX 9.1 for x86-64
  • xpdf >= 3.00-64.35
SUSE LINUX 9.2
  • xpdf >= 3.00-78.11
SUSE LINUX 9.3
  • xpdf >= 3.00-87.2
SUSE LINUX 10.0
  • gpdf >= 2.10.0-12.2
SUSE LINUX 9.1 for IA32
SUSE LINUX 9.1 for x86-64
  • gpdf >= 0.112.1-26.10
SUSE LINUX 9.2
  • gpdf >= 0.131-11.10
SUSE LINUX 9.3
  • gpdf >= 2.10.0-4.4
SUSE LINUX 10.0
  • kdegraphics3-pdf >= 3.4.2-12.2
SUSE LINUX 9.1 for IA32
SUSE LINUX 9.1 for x86-64
  • kdegraphics3-pdf >= 3.2.1-67.16
SUSE LINUX 9.2
  • kdegraphics3-pdf >= 3.3.0-13.7
SUSE LINUX 9.3
  • kdegraphics3-pdf >= 3.4.0-11.5
SLES SDK 9 for IBM S/390 and IBM zSeries
SLES SDK 9 for IBM iSeries and IBM pSeries
SLES SDK 9 for IBM zSeries
SLES SDK 9 for IPF
SLES SDK 9 for X86-64
SLES SDK 9 for x86
  • xpdf >= 3.00-64.35
core9.x86
core9.ia64
core9.ppc
core9.s390
YOU Patch Nr: 10811
SUSE LINUX 10.0
  • koffice-wordprocessing >= 1.4.1-10.3
SuSE Linux 9.0 for AMD64
SuSE Linux 9.0 for IA32
  • koffice-wordprocessing >= 1.2.92-89
SUSE LINUX 9.1 for IA32
SUSE LINUX 9.1 for x86-64
  • koffice-wordprocessing >= 1.3-67.4
SUSE LINUX 9.2
  • koffice-wordprocessing >= 1.3.3-3.4
SUSE LINUX 9.3
  • koffice-wordprocessing >= 1.3.5-11.3

© 2014 Novell