NetSight
IP …
critical10.0

CVE-2005-3625

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinit…

Impact

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

Affected products

VendorProductAffected versions
Easy Software ProductsCups
Versions 1.1.22, 1.1.22_rc1, 1.1.23, 1.1.23_rc1
KdeKdegraphics
Versions 3.2, 3.4.3
KdeKoffice
Versions 1.4, 1.4.1, 1.4.2
KdeKpdf
Versions 3.2, 3.4.3
KdeKword
Version 1.4.2
LibextractorLibextractor
All versions
PopplerPoppler
Version 0.4.2
SgiPropack
Version 3.0
TetexTetex
Versions 1.0.7, 2.0, 2.0.1, 2.0.2, 3.0
XpdfXpdf
Version 3.0
ConectivaLinux
Version 10.0
DebianDebian Linux
Versions 3.0, 3.1

Weakness classification

CWE-399

References