Lucene search

[email protected]CVE-2005-3625

HistoryDec 31, 2005 - 5:00 a.m.

CVE-2005-3625

2005-12-3105:00:00

CWE-399

[email protected]

web.nvd.nist.gov

xpdf

gpdf

kpdf

pdftohtml

poppler

tetex

cups

libextractor

ccittfaxdecode

dctdecode

infinite cpu spins

cve-2005-3625

nvd

6.1 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.5%

JSON

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka “Infinite CPU spins.”

CPENameOperatorVersion
easy_software_products:cupseasy software products cupseq1.1.22
kde:kpdfkde kpdfeq3.4.3
kde:kdegraphicskde kdegraphicseq3.4.3
tetex:tetextetexeq3.0
kde:kofficekde kofficeeq1.4.1
kde:kwordkde kwordeq1.4.2
poppler:popplerpopplereq0.4.2
tetex:tetextetexeq1.0.7
sgi:propacksgi propackeq3.0
easy_software_products:cupseasy software products cupseq1.1.23_rc1

CPE	Name	Operator	Version
easy_software_products:cups	easy software products cups	eq	1.1.22
kde:kpdf	kde kpdf	eq	3.4.3
kde:kdegraphics	kde kdegraphics	eq	3.4.3
tetex:tetex	tetex	eq	3.0
kde:koffice	kde koffice	eq	1.4.1
kde:kword	kde kword	eq	1.4.2
poppler:poppler	poppler	eq	0.4.2
tetex:tetex	tetex	eq	1.0.7
sgi:propack	sgi propack	eq	3.0
easy_software_products:cups	easy software products cups	eq	1.1.23_rc1

Rows per page:

1-10 of 731

References

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U

ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U

ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U

lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

rhn.redhat.com/errata/RHSA-2006-0177.html

scary.beasts.org/security/CESA-2005-003.txt

secunia.com/advisories/18147

secunia.com/advisories/18303

secunia.com/advisories/18312

secunia.com/advisories/18313

secunia.com/advisories/18329

secunia.com/advisories/18332

secunia.com/advisories/18334

secunia.com/advisories/18335

secunia.com/advisories/18338

secunia.com/advisories/18349

secunia.com/advisories/18373

secunia.com/advisories/18375

secunia.com/advisories/18380

secunia.com/advisories/18385

secunia.com/advisories/18387

secunia.com/advisories/18389

secunia.com/advisories/18398

secunia.com/advisories/18407

secunia.com/advisories/18414

secunia.com/advisories/18416

secunia.com/advisories/18423

secunia.com/advisories/18425

secunia.com/advisories/18428

secunia.com/advisories/18436

secunia.com/advisories/18448

secunia.com/advisories/18463

secunia.com/advisories/18517

secunia.com/advisories/18534

secunia.com/advisories/18554

secunia.com/advisories/18582

secunia.com/advisories/18642

secunia.com/advisories/18644

secunia.com/advisories/18674

secunia.com/advisories/18675

secunia.com/advisories/18679

secunia.com/advisories/18908

secunia.com/advisories/18913

secunia.com/advisories/19230

secunia.com/advisories/19377

secunia.com/advisories/25729

slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683

slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747

sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1

www.debian.org/security/2005/dsa-931

www.debian.org/security/2005/dsa-932

www.debian.org/security/2005/dsa-937

www.debian.org/security/2005/dsa-938

www.debian.org/security/2005/dsa-940

www.debian.org/security/2006/dsa-936

www.debian.org/security/2006/dsa-950

www.debian.org/security/2006/dsa-961

www.debian.org/security/2006/dsa-962

www.gentoo.org/security/en/glsa/glsa-200601-02.xml

www.gentoo.org/security/en/glsa/glsa-200601-17.xml

www.kde.org/info/security/advisory-20051207-2.txt

www.mandriva.com/security/advisories?name=MDKSA-2006:003

www.mandriva.com/security/advisories?name=MDKSA-2006:004

www.mandriva.com/security/advisories?name=MDKSA-2006:005

www.mandriva.com/security/advisories?name=MDKSA-2006:006

www.mandriva.com/security/advisories?name=MDKSA-2006:008

www.mandriva.com/security/advisories?name=MDKSA-2006:010

www.mandriva.com/security/advisories?name=MDKSA-2006:011

www.mandriva.com/security/advisories?name=MDKSA-2006:012

www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html

www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html

www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html

www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html

www.redhat.com/support/errata/RHSA-2006-0160.html

www.redhat.com/support/errata/RHSA-2006-0163.html

www.securityfocus.com/archive/1/427053/100/0/threaded

www.securityfocus.com/archive/1/427990/100/0/threaded

www.securityfocus.com/bid/16143

www.trustix.org/errata/2006/0002/

www.vupen.com/english/advisories/2006/0047

www.vupen.com/english/advisories/2007/2280

exchange.xforce.ibmcloud.com/vulnerabilities/24023

oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575

usn.ubuntu.com/236-1/

6.1 Medium

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.006 Low

EPSS

Percentile

78.5%

JSON

Related for CVE-2005-3625

ubuntucve1 debiancve1 nessus40 openvas26 ubuntu2 redhat5 securityvulns3 gentoo2 centos8 debian18 osv3 suse1 slackware2