CVE-2005-2097

no score yetEPSS 0.4%

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-31)
Published: 2005-08-16
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

kde:kpdf
xpdf:xpdf

References

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt
http://secunia.com/advisories/17277
http://secunia.com/advisories/18398
http://secunia.com/advisories/18407
http://secunia.com/advisories/21339

Check your stack JSON