Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2005-3191

16
FAUCET Score

CVE-2005-3191 describes multiple heap-based buffer overflows in the DCT stream parsing code of xpdf 3.01 and earlier, impacting various products like Poppler, KDE kpdf, and CUPS. This vulnerability allows user-assisted attackers to trigger a denial of service (heap corruption) and potentially execute arbitrary code through a crafted PDF file containing an out-of-range number of components. With a CVSS score of 5.1, it has a network attack vector, high access complexity, and partial impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
0.90CPE matchmatch criteria
cpe:2.3:a:xpdf:xpdf:0.90:*:*:*:*:*:*:*
0.91CPE matchmatch criteria
cpe:2.3:a:xpdf:xpdf:0.91:*:*:*:*:*:*:*
0.92CPE matchmatch criteria
cpe:2.3:a:xpdf:xpdf:0.92:*:*:*:*:*:*:*
0.93CPE matchmatch criteria
cpe:2.3:a:xpdf:xpdf:0.93:*:*:*:*:*:*:*
1.0CPE matchmatch criteria
cpe:2.3:a:xpdf:xpdf:1.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 2.0

5.1MEDIUM

AV:N/AC:H/Au:N/C:P/I:P/A:P

Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Exploitability Score
4.9
Impact Score
6.4
CvssVersion
2.0

Exploit Intelligence

EPSS Score
4.08%
Probability of exploitation in next 30 days
EPSS Percentile
89.6%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0408 is in the 86th percentile among its peer group of 19,956 CVEs.

Social Chatter

No social media mentions found for this CVE.

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (8)

redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: xpdf-1:2.02-9.8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: cups-1:1.1.17-13.3.34
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 3Fixed in: tetex-0:1.0.7-67.9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: xpdf-1:3.00-11.10
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: gpdf-0:2.8.2-7.3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: kdegraphics-7:3.3.1-3.6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: cups-1:1.1.22-0.rc1.9.9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 4Fixed in: tetex-0:2.0.2-22.EL4.7
View patch

Vendor Advisories (1)

redhatCVE-2005-3191Important

security flaw

Dec 6, 2005

References

ftp.sco.com / pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
ftp.sco.com / pub/updates/OpenServer/SCOSA-2006.20/SCOSA-2006.20.txt
ftp.sco.com / pub/updates/UnixWare/SCOSA-2006.21/SCOSA-2006.21.txt
patches.sgi.com / support/free/security/advisories/20051201-01-U
patches.sgi.com / support/free/security/advisories/20060101-01-U
patches.sgi.com / support/free/security/advisories/20060201-01-U
bugs.debian.org / cgi-bin/bugreport.cgi
lists.suse.com / archive/suse-security-announce/2006-Jan/0001.html
rhn.redhat.com / errata/RHSA-2005-868.html
Vendor Advisory
secunia.com / advisories/17897
Vendor Advisory
secunia.com / advisories/17908
Vendor Advisory
secunia.com / advisories/17912
Vendor Advisory
secunia.com / advisories/17916
Vendor Advisory
secunia.com / advisories/17920
Vendor Advisory
secunia.com / advisories/17921
Vendor Advisory
secunia.com / advisories/17926
Vendor Advisory
secunia.com / advisories/17929
Vendor Advisory
secunia.com / advisories/17940
Vendor Advisory
secunia.com / advisories/17955
secunia.com / advisories/17976
Vendor Advisory
secunia.com / advisories/18009
Vendor Advisory
secunia.com / advisories/18055
Vendor Advisory
secunia.com / advisories/18061
Vendor Advisory
secunia.com / advisories/18147
secunia.com / advisories/18189
Vendor Advisory
secunia.com / advisories/18191
Vendor Advisory
secunia.com / advisories/18192
Vendor Advisory
secunia.com / advisories/18303
secunia.com / advisories/18313
Vendor Advisory
secunia.com / advisories/18336
Vendor Advisory
secunia.com / advisories/18349
Vendor Advisory
secunia.com / advisories/18380
secunia.com / advisories/18385
Vendor Advisory
secunia.com / advisories/18387
Vendor Advisory
secunia.com / advisories/18389
secunia.com / advisories/18398
secunia.com / advisories/18407
secunia.com / advisories/18416
Vendor Advisory
secunia.com / advisories/18428
secunia.com / advisories/18436
secunia.com / advisories/18448
secunia.com / advisories/18503
secunia.com / advisories/18517
secunia.com / advisories/18534
secunia.com / advisories/18549
secunia.com / advisories/18554
secunia.com / advisories/18582
secunia.com / advisories/18674
secunia.com / advisories/18675
secunia.com / advisories/18679
secunia.com / advisories/18908
secunia.com / advisories/18913
secunia.com / advisories/19230
secunia.com / advisories/19377
secunia.com / advisories/19797
secunia.com / advisories/19798
secunia.com / advisories/25729
secunia.com / advisories/26413
securityreason.com / securityalert/233
securityreason.com / securityalert/234
securitytracker.com / id
securitytracker.com / id
exchange.xforce.ibmcloud.com / vulnerabilities/23443
exchange.xforce.ibmcloud.com / vulnerabilities/23444
issues.rpath.com / browse/RPL-1609
slackware.com / security/viewer.php
slackware.com / security/viewer.php
oval.cisecurity.org / repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9760
sunsolve.sun.com / search/document.do
debian.org / security/2005/dsa-931
debian.org / security/2005/dsa-932
debian.org / security/2005/dsa-937
debian.org / security/2005/dsa-938
debian.org / security/2005/dsa-940
debian.org / security/2006/dsa-936
debian.org / security/2006/dsa-950
debian.org / security/2006/dsa-961
debian.org / security/2006/dsa-962
gentoo.org / security/en/glsa/glsa-200512-08.xml
gentoo.org / security/en/glsa/glsa-200601-02.xml
idefense.com / application/poi/display
PatchVendor Advisory
idefense.com / application/poi/display
PatchVendor Advisory
kde.org / info/security/advisory-20051207-1.txt
kde.org / info/security/advisory-20051207-2.txt
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
mandriva.com / security/advisories
novell.com / linux/security/advisories/2005_29_sr.html
novell.com / linux/security/advisories/2006_02_sr.html
redhat.com / archives/fedora-announce-list/2005-December/msg00015.html
redhat.com / archives/fedora-announce-list/2005-December/msg00016.html
redhat.com / archives/fedora-announce-list/2005-December/msg00036.html
redhat.com / archives/fedora-announce-list/2005-December/msg00037.html
redhat.com / support/errata/RHSA-2005-840.html
Vendor Advisory
redhat.com / support/errata/RHSA-2005-867.html
Vendor Advisory
redhat.com / support/errata/RHSA-2005-878.html
Vendor Advisory
redhat.com / support/errata/RHSA-2006-0160.html
securityfocus.com / archive/1/418883/100/0/threaded
securityfocus.com / archive/1/427053/100/0/threaded
securityfocus.com / archive/1/427990/100/0/threaded
securityfocus.com / bid/15726
securityfocus.com / bid/15727
trustix.org / errata/2005/0072
ubuntulinux.org / usn/usn-227-1
vupen.com / english/advisories/2005/2786
vupen.com / english/advisories/2005/2787
vupen.com / english/advisories/2005/2788
vupen.com / english/advisories/2005/2789
vupen.com / english/advisories/2005/2790
vupen.com / english/advisories/2005/2856
vupen.com / english/advisories/2007/2280