NVD脆弱性詳細

CVE-2005-3627

概要	Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with (1) a large "number of components" value that is not checked by DCTStream::readBaselineSOF or DCTStream::readProgressiveSOF, (2) a large "Huffman table index" value that is not checked by DCTStream::readHuffmanTables, and (3) certain uses of the scanInfo.numComps value by DCTStream::readScanInfo.
公表日	2005年12月31日14:00
登録日	2021年1月29日17:59
最終更新日	2018年10月20日0:37

CVSS2.0 : HIGH
スコア	7.5
ベクター	AV:N/AC:L/Au:N/C:P/I:P/A:P
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	低
攻撃前の認証要否(Au)	不要
機密性への影響(C)	低
完全性への影響(I)	低
可用性への影響(A)	低
全ての特権を取得	いいえ
ユーザー権限を取得	はい
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:xpdf:xpdf::::::::

関連情報、対策とツール

No	URL	refsource	タグ
1	ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt	SCO
2	ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U	SGI
3	ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U	SGI
4	ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U	SGI
5	http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html	SUSE	Patch Vendor Advisory
6	http://rhn.redhat.com/errata/RHSA-2006-0177.html	REDHAT	Patch Vendor Advisory
7	http://scary.beasts.org/security/CESA-2005-003.txt	MISC	Exploit Vendor Advisory
8	http://secunia.com/advisories/18147	SECUNIA
9	http://secunia.com/advisories/18303	SECUNIA	Patch Vendor Advisory
10	http://secunia.com/advisories/18312	SECUNIA	Patch Vendor Advisory
11	http://secunia.com/advisories/18313	SECUNIA	Patch Vendor Advisory
12	http://secunia.com/advisories/18329	SECUNIA	Vendor Advisory
13	http://secunia.com/advisories/18332	SECUNIA	Vendor Advisory
14	http://secunia.com/advisories/18334	SECUNIA	Patch Vendor Advisory
15	http://secunia.com/advisories/18335	SECUNIA	Patch Vendor Advisory
16	http://secunia.com/advisories/18338	SECUNIA	Patch Vendor Advisory
17	http://secunia.com/advisories/18349	SECUNIA	Patch Vendor Advisory
18	http://secunia.com/advisories/18373	SECUNIA
19	http://secunia.com/advisories/18375	SECUNIA	Vendor Advisory
20	http://secunia.com/advisories/18380	SECUNIA
21	http://secunia.com/advisories/18385	SECUNIA	Patch Vendor Advisory
22	http://secunia.com/advisories/18387	SECUNIA	Patch Vendor Advisory
23	http://secunia.com/advisories/18389	SECUNIA	Patch Vendor Advisory
24	http://secunia.com/advisories/18398	SECUNIA	Patch Vendor Advisory
25	http://secunia.com/advisories/18407	SECUNIA	Patch Vendor Advisory
26	http://secunia.com/advisories/18414	SECUNIA
27	http://secunia.com/advisories/18416	SECUNIA	Patch Vendor Advisory
28	http://secunia.com/advisories/18423	SECUNIA	Patch Vendor Advisory
29	http://secunia.com/advisories/18425	SECUNIA
30	http://secunia.com/advisories/18428	SECUNIA
31	http://secunia.com/advisories/18436	SECUNIA
32	http://secunia.com/advisories/18448	SECUNIA	Patch Vendor Advisory
33	http://secunia.com/advisories/18463	SECUNIA
34	http://secunia.com/advisories/18517	SECUNIA	Patch Vendor Advisory
35	http://secunia.com/advisories/18534	SECUNIA	Patch Vendor Advisory
36	http://secunia.com/advisories/18554	SECUNIA	Patch Vendor Advisory
37	http://secunia.com/advisories/18582	SECUNIA	Patch Vendor Advisory
38	http://secunia.com/advisories/18642	SECUNIA	Vendor Advisory
39	http://secunia.com/advisories/18644	SECUNIA	Vendor Advisory
40	http://secunia.com/advisories/18674	SECUNIA	Vendor Advisory
41	http://secunia.com/advisories/18675	SECUNIA	Vendor Advisory
42	http://secunia.com/advisories/18679	SECUNIA	Vendor Advisory
43	http://secunia.com/advisories/18908	SECUNIA	Vendor Advisory
44	http://secunia.com/advisories/18913	SECUNIA
45	http://secunia.com/advisories/19230	SECUNIA
46	http://secunia.com/advisories/19377	SECUNIA
47	http://secunia.com/advisories/25729	SECUNIA
48	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683	SLACKWARE
49	http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747	SLACKWARE
50	http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1	SUNALERT
51	http://www.debian.org/security/2005/dsa-931	DEBIAN
52	http://www.debian.org/security/2005/dsa-932	DEBIAN
53	http://www.debian.org/security/2005/dsa-937	DEBIAN
54	http://www.debian.org/security/2005/dsa-938	DEBIAN
55	http://www.debian.org/security/2005/dsa-940	DEBIAN
56	http://www.debian.org/security/2006/dsa-936	DEBIAN	Patch Vendor Advisory
57	http://www.debian.org/security/2006/dsa-950	DEBIAN	Patch Vendor Advisory
58	http://www.debian.org/security/2006/dsa-961	DEBIAN	Patch Vendor Advisory
59	http://www.debian.org/security/2006/dsa-962	DEBIAN
60	http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml	GENTOO	Patch Vendor Advisory
61	http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml	GENTOO
62	http://www.kde.org/info/security/advisory-20051207-2.txt	CONFIRM	Patch
63	http://www.mandriva.com/security/advisories?name=MDKSA-2006:003	MANDRIVA
64	http://www.mandriva.com/security/advisories?name=MDKSA-2006:004	MANDRIVA
65	http://www.mandriva.com/security/advisories?name=MDKSA-2006:005	MANDRIVA
66	http://www.mandriva.com/security/advisories?name=MDKSA-2006:006	MANDRIVA
67	http://www.mandriva.com/security/advisories?name=MDKSA-2006:008	MANDRIVA
68	http://www.mandriva.com/security/advisories?name=MDKSA-2006:010	MANDRAKE
69	http://www.mandriva.com/security/advisories?name=MDKSA-2006:011	MANDRIVA
70	http://www.mandriva.com/security/advisories?name=MDKSA-2006:012	MANDRIVA
71	http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html	CONFIRM	Patch
72	http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html	CONFIRM	Patch
73	http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html	FEDORA
74	http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html	FEDORA
75	http://www.redhat.com/support/errata/RHSA-2006-0160.html	REDHAT	Patch Vendor Advisory
76	http://www.redhat.com/support/errata/RHSA-2006-0163.html	REDHAT
77	http://www.securityfocus.com/archive/1/427053/100/0/threaded	FEDORA
78	http://www.securityfocus.com/archive/1/427990/100/0/threaded	FEDORA
79	http://www.securityfocus.com/bid/16143	BID	Patch
80	http://www.trustix.org/errata/2006/0002/	TRUSTIX
81	http://www.vupen.com/english/advisories/2006/0047	VUPEN
82	http://www.vupen.com/english/advisories/2007/2280	VUPEN
83	https://exchange.xforce.ibmcloud.com/vulnerabilities/24024	XF
84	https://exchange.xforce.ibmcloud.com/vulnerabilities/24025	XF
85	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10200	OVAL
86	https://usn.ubuntu.com/236-1/	UBUNTU

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html