CVE-2005-3625
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
- EPSS
- 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- conectiva:linux
- debian:debian_linux
- easy_software_products:cups
- gentoo:linux
- kde:kdegraphics
- kde:koffice
- kde:kpdf
- kde:kword
- libextractor:libextractor
- mandrakesoft:mandrake_linux
- mandrakesoft:mandrake_linux_corporate_server
- poppler:poppler
- redhat:enterprise_linux
- redhat:enterprise_linux_desktop
- redhat:fedora_core
- redhat:linux
- redhat:linux_advanced_workstation
- sco:openserver
- sgi:propack
- slackware:slackware_linux
- suse:suse_linux
- tetex:tetex
- trustix:secure_linux
- turbolinux:turbolinux
- turbolinux:turbolinux_appliance_server
- turbolinux:turbolinux_desktop
- turbolinux:turbolinux_home
- turbolinux:turbolinux_multimedia
- turbolinux:turbolinux_personal
- turbolinux:turbolinux_server
- turbolinux:turbolinux_workstation
- ubuntu:ubuntu_linux
- xpdf:xpdf
References
- ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
- ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
- ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
- ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
- http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html