CVE Feed

    Dashboard / CVE / CVE-2005-3625

    CVE-2005-3625

    Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

    Published:Dec 31, 2005
    Last Modified:Apr 16, 2026
    EPS:Jan 6, 2006
    EPSS Score:0.11286
    CVSS Score:10

    Affected Products

    Vendor
    Conectiva
    Product
    Linux
    Vendor
    Debian
    Product
    Debian Linux
    Vendor
    Easy Software Products
    Product
    Cups
    Vendor
    Gentoo
    Product
    Linux
    Vendor
    Kde
    Product
    Kdegraphics
    Vendor
    Kde
    Product
    Koffice
    Vendor
    Kde
    Product
    Kpdf
    Vendor
    Kde
    Product
    Kword
    Vendor
    Libextractor
    Product
    Libextractor
    Vendor
    Mandrakesoft
    Product
    Mandrake Linux
    Vendor
    Mandrakesoft
    Product
    Mandrake Linux Corporate Server
    Vendor
    Poppler
    Product
    Poppler
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    Redhat
    Product
    Enterprise Linux Desktop
    Vendor
    Redhat
    Product
    Fedora Core
    Vendor
    Redhat
    Product
    Linux
    Vendor
    Redhat
    Product
    Linux Advanced Workstation
    Vendor
    Sco
    Product
    Openserver
    Vendor
    Sgi
    Product
    Propack
    Vendor
    Slackware
    Product
    Slackware Linux
    Vendor
    Suse
    Product
    Suse Linux
    Vendor
    Tetex
    Product
    Tetex
    Vendor
    Trustix
    Product
    Secure Linux
    Vendor
    Turbolinux
    Product
    Turbolinux
    Vendor
    Turbolinux
    Product
    Turbolinux Appliance Server
    Vendor
    Turbolinux
    Product
    Turbolinux Desktop
    Vendor
    Turbolinux
    Product
    Turbolinux Home
    Vendor
    Turbolinux
    Product
    Turbolinux Multimedia
    Vendor
    Turbolinux
    Product
    Turbolinux Personal
    Vendor
    Turbolinux
    Product
    Turbolinux Server
    Vendor
    Turbolinux
    Product
    Turbolinux Workstation
    Vendor
    Ubuntu
    Product
    Ubuntu Linux
    Vendor
    Xpdf
    Product
    Xpdf

    Exploits

    http://scary.beasts.org/security/CESA-2005-003.txthttp://scary.beasts.org/security/CESA-2005-003.txt

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2012-5938 (CVSS 7.2) — The installation process in IBM InfoSphere Information Server 8.1, 8.5, 8.7, and 9.1 on UNIX and Linux sets in…
    CVE-2009-3048 (CVSS 4.3) — Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functional…
    CVE-2007-4137 (CVSS 7.5) — Off-by-one error in the QUtf8Decoder::toUnicode function in Trolltech Qt 3 allows context-dependent attackers …
    CVE-2005-3624 (CVSS 5) — The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS…
    CVE-2005-3626 (CVSS 5) — Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow…
    CVE-2005-0754 (CVSS 7.5) — Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows re…
    CVE-2005-1043 (CVSS 5) — exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash…
    CVE-2005-0750 (CVSS 7.2) — The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 throug…
    CVE-2005-0736 (CVSS 2.1) — Integer overflow in sys_epoll_wait in eventpoll.c for Linux kernel 2.6 to 2.6.11 allows local users to overwri…
    CVE-2005-0699 (CVSS 7.5) — Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11…

    References

    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
    ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
    ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
    ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
    http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
    http://rhn.redhat.com/errata/RHSA-2006-0177.html
    http://scary.beasts.org/security/CESA-2005-003.txt
    http://secunia.com/advisories/18147
    http://secunia.com/advisories/18303
    http://secunia.com/advisories/18312
    http://secunia.com/advisories/18313
    http://secunia.com/advisories/18329
    http://secunia.com/advisories/18332
    http://secunia.com/advisories/18334
    http://secunia.com/advisories/18335
    http://secunia.com/advisories/18338
    http://secunia.com/advisories/18349
    http://secunia.com/advisories/18373
    http://secunia.com/advisories/18375
    http://secunia.com/advisories/18380
    http://secunia.com/advisories/18385
    http://secunia.com/advisories/18387
    http://secunia.com/advisories/18389
    http://secunia.com/advisories/18398
    http://secunia.com/advisories/18407
    http://secunia.com/advisories/18414
    http://secunia.com/advisories/18416
    http://secunia.com/advisories/18423
    http://secunia.com/advisories/18425
    http://secunia.com/advisories/18428
    http://secunia.com/advisories/18436
    http://secunia.com/advisories/18448
    http://secunia.com/advisories/18463
    http://secunia.com/advisories/18517
    http://secunia.com/advisories/18534
    http://secunia.com/advisories/18554
    http://secunia.com/advisories/18582
    http://secunia.com/advisories/18642
    http://secunia.com/advisories/18644
    http://secunia.com/advisories/18674
    http://secunia.com/advisories/18675
    http://secunia.com/advisories/18679
    http://secunia.com/advisories/18908
    http://secunia.com/advisories/18913
    http://secunia.com/advisories/19230
    http://secunia.com/advisories/19377
    http://secunia.com/advisories/25729
    http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
    http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
    http://www.debian.org/security/2005/dsa-931
    http://www.debian.org/security/2005/dsa-932
    http://www.debian.org/security/2005/dsa-937
    http://www.debian.org/security/2005/dsa-938
    http://www.debian.org/security/2005/dsa-940
    http://www.debian.org/security/2006/dsa-936
    http://www.debian.org/security/2006/dsa-950
    http://www.debian.org/security/2006/dsa-961
    http://www.debian.org/security/2006/dsa-962
    http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
    http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
    http://www.kde.org/info/security/advisory-20051207-2.txt
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
    http://www.redhat.com/support/errata/RHSA-2006-0160.html
    http://www.redhat.com/support/errata/RHSA-2006-0163.html
    http://www.securityfocus.com/archive/1/427053/100/0/threaded
    http://www.securityfocus.com/archive/1/427990/100/0/threaded
    http://www.securityfocus.com/bid/16143
    http://www.trustix.org/errata/2006/0002/
    http://www.vupen.com/english/advisories/2006/0047
    http://www.vupen.com/english/advisories/2007/2280
    https://exchange.xforce.ibmcloud.com/vulnerabilities/24023
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575
    https://usn.ubuntu.com/236-1/
    ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
    ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
    ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
    ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
    http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
    http://rhn.redhat.com/errata/RHSA-2006-0177.html
    http://scary.beasts.org/security/CESA-2005-003.txt
    http://secunia.com/advisories/18147
    http://secunia.com/advisories/18303
    http://secunia.com/advisories/18312
    http://secunia.com/advisories/18313
    http://secunia.com/advisories/18329
    http://secunia.com/advisories/18332
    http://secunia.com/advisories/18334
    http://secunia.com/advisories/18335
    http://secunia.com/advisories/18338
    http://secunia.com/advisories/18349
    http://secunia.com/advisories/18373
    http://secunia.com/advisories/18375
    http://secunia.com/advisories/18380
    http://secunia.com/advisories/18385
    http://secunia.com/advisories/18387
    http://secunia.com/advisories/18389
    http://secunia.com/advisories/18398
    http://secunia.com/advisories/18407
    http://secunia.com/advisories/18414
    http://secunia.com/advisories/18416
    http://secunia.com/advisories/18423
    http://secunia.com/advisories/18425
    http://secunia.com/advisories/18428
    http://secunia.com/advisories/18436
    http://secunia.com/advisories/18448
    http://secunia.com/advisories/18463
    http://secunia.com/advisories/18517
    http://secunia.com/advisories/18534
    http://secunia.com/advisories/18554
    http://secunia.com/advisories/18582
    http://secunia.com/advisories/18642
    http://secunia.com/advisories/18644
    http://secunia.com/advisories/18674
    http://secunia.com/advisories/18675
    http://secunia.com/advisories/18679
    http://secunia.com/advisories/18908
    http://secunia.com/advisories/18913
    http://secunia.com/advisories/19230
    http://secunia.com/advisories/19377
    http://secunia.com/advisories/25729
    http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
    http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
    http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
    http://www.debian.org/security/2005/dsa-931
    http://www.debian.org/security/2005/dsa-932
    http://www.debian.org/security/2005/dsa-937
    http://www.debian.org/security/2005/dsa-938
    http://www.debian.org/security/2005/dsa-940
    http://www.debian.org/security/2006/dsa-936
    http://www.debian.org/security/2006/dsa-950
    http://www.debian.org/security/2006/dsa-961
    http://www.debian.org/security/2006/dsa-962
    http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
    http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
    http://www.kde.org/info/security/advisory-20051207-2.txt
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
    http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
    http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
    http://www.redhat.com/support/errata/RHSA-2006-0160.html
    http://www.redhat.com/support/errata/RHSA-2006-0163.html
    http://www.securityfocus.com/archive/1/427053/100/0/threaded
    http://www.securityfocus.com/archive/1/427990/100/0/threaded
    http://www.securityfocus.com/bid/16143
    http://www.trustix.org/errata/2006/0002/
    http://www.vupen.com/english/advisories/2006/0047
    http://www.vupen.com/english/advisories/2007/2280
    https://exchange.xforce.ibmcloud.com/vulnerabilities/24023
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575
    https://usn.ubuntu.com/236-1/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High