Lucene search
K

24 matches found

Tenable Nessus
Tenable Nessus
added 2025/10/28 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2025-62707

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an...

8.7CVSS5.7AI score0.00051EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/10/23 11:22 p.m.1 views

SUSE CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

5.3CVSS6.9AI score0.00051EPSS
Exploits0References3
NVD
NVD
added 2025/10/22 10:15 p.m.3 views

CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS0.00051EPSS
Exploits0References4
OSV
OSV
added 2025/10/22 10:15 p.m.0 views

UBUNTU-CVE-2025-62707

pypdf is a free and open-source pure-python PDF library. Prior to version 6.1.3, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires parsing the content stream of a page which has an inline image using the DCTDecode filter. This has been fixed in...

8.7CVSS7AI score0.00051EPSS
Exploits0References6
CNNVD
CNNVD
added 2025/10/22 12:0 a.m.3 views

pypdf 安全漏洞

pypdf is py-pdf open source a free open source pure python PDF library . The ability to split, merge, crop and convert pages of a PDF file. A security vulnerability exists in pypdf versions prior to 6.1.3, which stems from parsing a stream of inline image page content using the DCTDecode filter,...

8.7CVSS6.4AI score0.00051EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/10/22 12:0 a.m.1 views

PT-2025-43413

Name of the Vulnerable Software and Affected Versions pypdf versions prior to 6.1.3 Description A crafted PDF file can cause an infinite loop when parsed, specifically when processing the content stream of a page containing an inline image utilizing the DCTDecode filter. This issue requires parsi...

8.7CVSS6.6AI score0.00051EPSS
Exploits0References15
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2005-3624

Malware in sbrugna...

7.5CVSS8.2AI score0.04327EPSS
Exploits2References102
SUSE CVE
SUSE CVE
added 2023/02/15 6:16 a.m.1 views

SUSE CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.9AI score0.04327EPSS
Exploits2References6
Source Incite
Source Incite
added 2019/01/22 12:0 a.m.27 views

SRC-2019-0022 : Adobe Acrobat Pro DC Distiller DCTDecode JPEG parsing SOS Marker Out-of-Bounds Read Information Disclosure Vulnerability

Vulnerability Details: This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Adobe Acrobat Pro DC. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific...

7.5CVSS8.4AI score0.02399EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2006/01/11 7:4 p.m.2 views

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.6AI score0.04327EPSS
Exploits2References4
RedHat Linux
RedHat Linux
added 2006/01/11 6:46 p.m.1 views

security flaw

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.6AI score0.04327EPSS
Exploits2References4
Cvelist
Cvelist
added 2006/01/06 10:0 p.m.28 views

CVE-2005-3625

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

6.1AI score0.11286EPSS
Exploits1References85
Debian CVE
Debian CVE
added 2006/01/06 10:0 p.m.28 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS8.9AI score0.04327EPSS
Exploits2
CVE
CVE
added 2006/01/06 10:0 p.m.85 views

CVE-2005-3627

CVE-2005-3627 is a vulnerability in Xpdf (Stream.cc) affecting multiple products using Xpdf code paths (e.g., gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor). The issue arises in DCTDecode stream handling: (1) an unchecked large number of components value in DCTStream::readBaselineSOF/...

7.5CVSS8.9AI score0.04327EPSS
Exploits2References86Affected Software1
CVE
CVE
added 2006/01/06 10:0 p.m.90 views

CVE-2005-3625

CVE-2005-3625 is confirmed to affect Xpdf and related tools (gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, etc.). The issue is a denial-of-service in PDF stream handling where streams that end prematurely can cause an infinite loop, demonstrated for the CCITTFaxDecode and DCTDecode s...

10CVSS6.2AI score0.11286EPSS
Exploits1References85Affected Software11
Cvelist
Cvelist
added 2006/01/06 10:0 p.m.20 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

8.9AI score0.04327EPSS
Exploits2References86
OSV
OSV
added 2005/12/31 5:0 a.m.1 views

DEBIAN-CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.7AI score0.04327EPSS
Exploits2References1
NVD
NVD
added 2005/12/31 5:0 a.m.22 views

CVE-2005-3625

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service infinite loop via streams that end prematurely, as demonstrated using the 1 CCITTFaxDecode and 2 DCTDecode streams, aka "Infinite CPU spins."...

10CVSS6.1AI score0.11286EPSS
Exploits1References85
UbuntuCve
UbuntuCve
added 2005/12/31 5:0 a.m.35 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.5AI score0.04327EPSS
Exploits2References3
NVD
NVD
added 2005/12/31 5:0 a.m.17 views

CVE-2005-3627

Stream.cc in Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to modify memory and possibly execute arbitrary code via a DCTDecode stream with 1 a large "number of components" value that is not checked by...

7.5CVSS7.1AI score0.04327EPSS
Exploits2References86
Rows per page
Query Builder