Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1 as used in poppler teTeX KDE KOffice CUPS and other products allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.