iDEFENSE Security Advisory 12.05.05 – Local exploitation of a heap-based buffer overflow vulnerability in xpdf, as included by various vendor’s software distributions, could allow attackers to cause a denial of service (DoS) condition, potentially resulting in arbitrary code execution. The vulnerability specifically exists due to insufficient input validation in the Predictor stream parsing code. iDefense has confirmed the existence of this vulnerability in xpdf 3.01. All earlier versions of xpdf are suspected vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42185/12.05.05-4.txt
Source: https://packetstormsecurity.com/files/42185/iDEFENSE-Security-Advisory-2005-12-05.4.html