iDEFENSE Security Advisory 12.05.05 – Local exploitation of a heap-based buffer overflow vulnerability in xpdf, as included by multiple vendor’s software distributions, could allow attackers to cause a denial of service (DoS) condition, potentially resulting in arbitrary code execution. The vulnerability specifically exists due to insufficient input validation in the JPX Stream parsing code for decoding embedded JPEG 2000 images. iDefense has confirmed the existence of this vulnerability in xpdf 3.01. All earlier versions of xpdf are suspected vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42182/12.05.05-1.txt
Source: https://packetstormsecurity.com/files/42182/iDEFENSE-Security-Advisory-2005-12-05.1.html