CVE-2005-3625

CWE-39924 documents8 sources
Severity
10.0CRITICAL
EPSS
11.3%
top 6.48%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
28
Conectiva LinuxDebian Debian LinuxEasy Software Products Cups+25 more
Timeline
PublishedDec 31
Latest updateMay 3

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages29 packages

▶NVDeasy_software_products/cups4 versions+3
▶Debiancups< 1.1.22-7+3
▶Debianxpdf< 3.01-4+3
▶Debianpoppler< 0.4.4-1+3
▶Debianlibextractor< 0.5.9-1+3

Also affects: Debian Linux 3.0, 3.1, Ubuntu Linux 4.1, 5.04, 5.10, Enterprise Linux 2.1, 3.0, 4.0

Patches

Patch: lists.suse.com ↗Patch: rhn.redhat.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-jm8v-5wvv-cpmw: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2022-05-03
▶
CVEList
CVE-2005-3625: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2006-01-06
▶
OSV
CVE-2005-3625: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service↗2005-12-31
▶

📋Vendor Advisories

4
Ubuntu
xpdf vulnerabilities in kword, kpdf↗2006-01-09
▶
Ubuntu
xpdf vulnerabilities↗2006-01-06
▶
Red Hat
security flaw↗2006-01-03
▶
Debian
CVE-2005-3625: cups - Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, l...↗2005
▶

💬Community

16
Bugzilla
CVE-2005-3625 security flaw↗2018-08-16
▶
Bugzilla
CVE-2005-3191 xpdf issues in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3624 xpdf issues in tetex for FC5test2 (CVE-2005-3625 CVE-2005-3626 CVE-2005-3627)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect poppler in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶
Bugzilla
CVE-2005-3191 xpdf issues affect kdegraphics in FC5test2 (CVE-2005-3192 CVE-2005-3193 CVE-2005-3624 CVE-2005-3625 CVE-2005-3626 CVE-2005-3627 CVE-2005-3628)↗2006-01-16
▶