CVE-2005-3625 - Vulncode-DB

CVE-2005-3625 (NVD)

2005-12-31

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

Products	Linux, Debian_linux, Cups, Linux, Kdegraphics, Koffice, Kpdf, Kword, Libextractor, Mandrake_linux, Mandrake_linux_corporate_server, Poppler, Enterprise_linux, Enterprise_linux_desktop, Fedora_core, Linux, Linux_advanced_workstation, Openserver, Propack, Slackware_linux, Suse_linux, Tetex, Secure_linux, Turbolinux, Turbolinux_appliance_server, Turbolinux_desktop, Turbolinux_home, Turbolinux_multimedia, Turbolinux_personal, Turbolinux_server, Turbolinux_workstation, Ubuntu_linux, Xpdf
Type	Resource Management Errors (CWE-399)
First patch	- None (likely due to unavailable code)
Links	• http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683 • http://www.redhat.com/support/errata/RHSA-2006-0160.html • ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt • http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 • http://secunia.com/advisories/18642 More/Less (80) • http://www.securityfocus.com/archive/1/427990/100/0/threaded • http://secunia.com/advisories/18908 • http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml • http://www.mandriva.com/security/advisories?name=MDKSA-2006:006 • http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747 • http://secunia.com/advisories/18448 • http://secunia.com/advisories/18407 • http://secunia.com/advisories/18428 • http://www.mandriva.com/security/advisories?name=MDKSA-2006:011 • http://www.mandriva.com/security/advisories?name=MDKSA-2006:010 • http://secunia.com/advisories/18313 • http://secunia.com/advisories/18463 • http://secunia.com/advisories/18303 • http://secunia.com/advisories/18387 • http://secunia.com/advisories/18644 • http://www.debian.org/security/2005/dsa-940 • http://www.debian.org/security/2006/dsa-961 • http://secunia.com/advisories/18335 • http://secunia.com/advisories/18534 • http://secunia.com/advisories/18375 • http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html • http://secunia.com/advisories/19230 • http://www.vupen.com/english/advisories/2006/0047 • http://secunia.com/advisories/18517 • http://secunia.com/advisories/18425 • https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575 • http://secunia.com/advisories/18436 • http://secunia.com/advisories/18674 • http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html • http://secunia.com/advisories/18373 • https://usn.ubuntu.com/236-1/ • http://secunia.com/advisories/18423 • http://www.trustix.org/errata/2006/0002/ • http://www.mandriva.com/security/advisories?name=MDKSA-2006:004 • http://www.mandriva.com/security/advisories?name=MDKSA-2006:012 • http://secunia.com/advisories/19377 • http://www.kde.org/info/security/advisory-20051207-2.txt • http://secunia.com/advisories/18675 • http://scary.beasts.org/security/CESA-2005-003.txt • ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U • http://rhn.redhat.com/errata/RHSA-2006-0177.html • http://www.debian.org/security/2005/dsa-932 • http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html • http://www.redhat.com/support/errata/RHSA-2006-0163.html • http://secunia.com/advisories/18349 • http://secunia.com/advisories/18389 • http://secunia.com/advisories/18554 • http://secunia.com/advisories/18414 • http://secunia.com/advisories/18913 • http://secunia.com/advisories/25729 • http://www.debian.org/security/2005/dsa-938 • http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html • http://www.debian.org/security/2005/dsa-937 • ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U • http://secunia.com/advisories/18338 • http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml • http://www.mandriva.com/security/advisories?name=MDKSA-2006:003 • http://secunia.com/advisories/18334 • http://www.securityfocus.com/archive/1/427053/100/0/threaded • http://secunia.com/advisories/18312 • http://www.securityfocus.com/bid/16143 • http://www.debian.org/security/2006/dsa-936 • http://secunia.com/advisories/18329 • ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U • http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html • http://secunia.com/advisories/18582 • http://secunia.com/advisories/18380 • http://secunia.com/advisories/18398 • http://www.vupen.com/english/advisories/2007/2280 • http://secunia.com/advisories/18147 • https://exchange.xforce.ibmcloud.com/vulnerabilities/24023 • http://secunia.com/advisories/18385 • http://www.debian.org/security/2005/dsa-931 • http://secunia.com/advisories/18416 • http://secunia.com/advisories/18332 • http://www.debian.org/security/2006/dsa-962 • http://www.debian.org/security/2006/dsa-950 • http://www.mandriva.com/security/advisories?name=MDKSA-2006:008 • http://www.mandriva.com/security/advisories?name=MDKSA-2006:005 • http://secunia.com/advisories/18679