Lucene search
+L

35 matches found

CVE
CVE
•added 2006/01/06 10:00 p.m.•119 views

CVE-2005-3627

CVE-2005-3627 is a vulnerability in Xpdf (Stream.cc) affecting multiple products using Xpdf code paths (e.g., gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor). The issue arises in DCTDecode stream handling: (1) an unchecked large number of components value in DCTStream::readBaselineSOF/...

7.5CVSS8AI score0.05521EPSS
SaveExploits2References86Affected Software1
CVE
CVE
•added 2006/01/06 10:00 p.m.•130 views

CVE-2005-3625

CVE-2005-3625 is confirmed to affect Xpdf and related tools (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is a denial-of-service in PDF stream handling where streams that end prematurely can cause an infinite loop, demonstrated for the CCITTFaxDecode and DCTDecode s...

10CVSS6.2AI score0.03823EPSS
SaveExploits1References85Affected Software11
Cvelist
Cvelist
•added 2006/01/06 10:00 p.m.•53 views

CVE-2005-3625

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

6.1AI score0.03823EPSS
SaveExploits1References85
Cvelist
Cvelist
•added 2006/01/06 10:00 p.m.•43 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

8.9AI score0.05521EPSS
SaveExploits2References86
Debian CVE
Debian CVE
•added 2006/01/06 10:00 p.m.•49 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8AI score0.05521EPSS
SaveExploits2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/06 12:00 a.m.•6 views

CVE-2005-3625: Undefined Security Weakness

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

10CVSS5.8AI score0.03823EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/01/06 12:00 a.m.•8 views

CVE-2005-3627: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS6.6AI score0.05521EPSS
SaveExploits2References2
NVD
NVD
•added 2005/12/31 5:00 a.m.•37 views

CVE-2005-3625

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

10CVSS6.1AI score0.03823EPSS
SaveExploits1References85
osv_cve
osv_cve
•added 2005/12/31 5:00 a.m.•22 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.1AI score
SaveExploits0References113
osv_debian
osv_debian
•added 2005/12/31 5:00 a.m.•16 views

DEBIAN-CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8AI score0.05521EPSS
SaveExploits2References1
UbuntuCve
UbuntuCve
•added 2005/12/31 5:00 a.m.•50 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8AI score0.05521EPSS
SaveExploits2References3
NVD
NVD
•added 2005/12/31 5:00 a.m.•38 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.1AI score0.05521EPSS
SaveExploits2References86
RedHat Linux
RedHat Linux
•added 2005/12/20 2:52 p.m.•17 views

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8AI score0.05521EPSS
SaveExploits2References4
RedHat Linux
RedHat Linux
•added 2005/12/06 2:40 p.m.•17 views

security flaw

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

10CVSS7.3AI score0.03823EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
•added 2005/12/06 2:40 p.m.•14 views

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8AI score0.05521EPSS
SaveExploits2References4
Rows per page
Query Builder