iDEFENSE Security Advisory 12.05.05 – Local exploitation of a heap-based buffer overflow vulnerability in xpdf, as included by multiple vendor’s software distributions, could allow attackers to cause a denial of service (DoS) condition, potentially resulting in arbitrary code execution. The vulnerability specifically exists due to insufficient input validation in the DCT stream parsing code. The DCTStream::readProgressiveSOF function from xpdf/Stream.cc takes the value of numComps from user-controllable data from within the PDF file. The numComps value is used in a loop to copy data from the file into a pre-allocated buffer in the heap. iDefense has confirmed the existence of this vulnerability in xpdf 3.01. All earlier versions of xpdf are suspected vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42184/12.05.05-3.txt
Source: https://packetstormsecurity.com/files/42184/iDEFENSE-Security-Advisory-2005-12-05.3.html