CVE-2005-3625

Easy Software Products Cups - Resource Management Error

Title source: rule

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

References (85)

[Various Sources] ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt

[Patch] http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html

[Patch, Vendor Advisory] http://rhn.redhat.com/errata/RHSA-2006-0177.html

[Exploit] http://scary.beasts.org/security/CESA-2005-003.txt

[Third Party Advisory] http://secunia.com/advisories/18147

[Patch, Vendor Advisory] http://secunia.com/advisories/18303

[Patch, Vendor Advisory] http://secunia.com/advisories/18312

[Patch, Vendor Advisory] http://secunia.com/advisories/18313

[Vendor Advisory] http://secunia.com/advisories/18329

[Vendor Advisory] http://secunia.com/advisories/18332

[Patch, Vendor Advisory] http://secunia.com/advisories/18334

[Patch, Vendor Advisory] http://secunia.com/advisories/18335

[Patch, Vendor Advisory] http://secunia.com/advisories/18338

[Patch, Vendor Advisory] http://secunia.com/advisories/18349

[Third Party Advisory] http://secunia.com/advisories/18373

[Vendor Advisory] http://secunia.com/advisories/18375

[Third Party Advisory] http://secunia.com/advisories/18380

[Patch, Vendor Advisory] http://secunia.com/advisories/18385

[Patch, Vendor Advisory] http://secunia.com/advisories/18387

[Patch, Vendor Advisory] http://secunia.com/advisories/18389

... and 65 more

Scores

EPSS 0.1129

EPSS Percentile 93.4%

Classification

CWE

CWE-399

Status draft

Affected Products (50)

easy_software_products/cups

easy_software_products/cups

easy_software_products/cups

easy_software_products/cups

kde/kdegraphics

kde/kdegraphics

kde/koffice

kde/koffice

kde/koffice

kde/kpdf

kde/kpdf

kde/kword

libextractor/libextractor

poppler/poppler

sgi/propack

... and 35 more

Timeline

Published Dec 31, 2005

Tracked Since Feb 18, 2026