10

CVE-2005-3625

Exploit
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Easy Software Products ≫ Cups Version 1.1.22
Easy Software Products ≫ Cups Version 1.1.22_rc1
Easy Software Products ≫ Cups Version 1.1.23
Easy Software Products ≫ Cups Version 1.1.23_rc1
Kde ≫ Kdegraphics Version 3.2
Kde ≫ Kdegraphics Version 3.4.3
Kde ≫ Koffice Version 1.4
Kde ≫ Koffice Version 1.4.1
Kde ≫ Koffice Version 1.4.2
Kde ≫ Kpdf Version 3.2
Kde ≫ Kpdf Version 3.4.3
Kde ≫ Kword Version 1.4.2
Poppler ≫ Poppler Version 0.4.2
Sgi ≫ Propack Version 3.0 Update sp6
Tetex ≫ Tetex Version 1.0.7
Tetex ≫ Tetex Version 2.0
Tetex ≫ Tetex Version 2.0.1
Tetex ≫ Tetex Version 2.0.2
Tetex ≫ Tetex Version 3.0
Xpdf ≫ Xpdf Version 3.0
Conectiva ≫ Linux Version 10.0
Debian ≫ Debian Linux Version 3.0
Debian ≫ Debian Linux Version 3.0 Edition alpha
Debian ≫ Debian Linux Version 3.0 Edition arm
Debian ≫ Debian Linux Version 3.0 Edition hppa
Debian ≫ Debian Linux Version 3.0 Edition ia-32
Debian ≫ Debian Linux Version 3.0 Edition ia-64
Debian ≫ Debian Linux Version 3.0 Edition m68k
Debian ≫ Debian Linux Version 3.0 Edition mips
Debian ≫ Debian Linux Version 3.0 Edition mipsel
Debian ≫ Debian Linux Version 3.0 Edition ppc
Debian ≫ Debian Linux Version 3.0 Edition s-390
Debian ≫ Debian Linux Version 3.0 Edition sparc
Debian ≫ Debian Linux Version 3.1
Debian ≫ Debian Linux Version 3.1 Edition alpha
Debian ≫ Debian Linux Version 3.1 Edition amd64
Debian ≫ Debian Linux Version 3.1 Edition arm
Debian ≫ Debian Linux Version 3.1 Edition hppa
Debian ≫ Debian Linux Version 3.1 Edition ia-32
Debian ≫ Debian Linux Version 3.1 Edition ia-64
Debian ≫ Debian Linux Version 3.1 Edition m68k
Debian ≫ Debian Linux Version 3.1 Edition mips
Debian ≫ Debian Linux Version 3.1 Edition mipsel
Debian ≫ Debian Linux Version 3.1 Edition ppc
Debian ≫ Debian Linux Version 3.1 Edition s-390
Debian ≫ Debian Linux Version 3.1 Edition sparc
Mandrakesoft ≫ Mandrake Linux Version 10.1
Mandrakesoft ≫ Mandrake Linux Version 10.1 Edition x86-64
Mandrakesoft ≫ Mandrake Linux Version 10.2
Mandrakesoft ≫ Mandrake Linux Version 10.2 Edition x86-64
Mandrakesoft ≫ Mandrake Linux Version 2006
Mandrakesoft ≫ Mandrake Linux Version 2006 Edition x86-64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version 2.1 Edition x86_64
Mandrakesoft ≫ Mandrake Linux Corporate Server Version 3.0 Edition x86_64
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server
Redhat ≫ Enterprise Linux Version 2.1 Edition advanced_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 2.1 Edition enterprise_server_ia64
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation
Redhat ≫ Enterprise Linux Version 2.1 Edition workstation_ia64
Redhat ≫ Enterprise Linux Version 3.0 Edition advanced_server
Redhat ≫ Enterprise Linux Version 3.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 3.0 Edition workstation_server
Redhat ≫ Enterprise Linux Version 4.0 Edition advanced_server
Redhat ≫ Enterprise Linux Version 4.0 Edition enterprise_server
Redhat ≫ Enterprise Linux Version 4.0 Edition workstation
Redhat ≫ Fedora Core Version core_1.0
Redhat ≫ Fedora Core Version core_2.0
Redhat ≫ Fedora Core Version core_3.0
Redhat ≫ Fedora Core Version core_4.0
Redhat ≫ Linux Version 7.3 Edition i386
Redhat ≫ Linux Version 9.0 Edition i386
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition ia64
Redhat ≫ Linux Advanced Workstation Version 2.1 Edition itanium
Sco ≫ Openserver Version 5.0.7
Sco ≫ Openserver Version 6.0
Slackware ≫ Slackware Linux Version 9.0
Slackware ≫ Slackware Linux Version 9.1
Slackware ≫ Slackware Linux Version 10.0
Slackware ≫ Slackware Linux Version 10.1
Slackware ≫ Slackware Linux Version 10.2
Suse ≫ Suse Linux Version 1.0
Suse ≫ Suse Linux Version 9.0 Edition enterprise_server
Suse ≫ Suse Linux Version 9.0 Edition personal
Suse ≫ Suse Linux Version 9.0 Edition professional
Suse ≫ Suse Linux Version 9.0 Edition s_390
Suse ≫ Suse Linux Version 9.0 Edition x86_64
Suse ≫ Suse Linux Version 9.1 Edition personal
Suse ≫ Suse Linux Version 9.1 Edition professional
Suse ≫ Suse Linux Version 9.1 Edition x86_64
Suse ≫ Suse Linux Version 9.2 Edition personal
Suse ≫ Suse Linux Version 9.2 Edition professional
Suse ≫ Suse Linux Version 9.2 Edition x86_64
Suse ≫ Suse Linux Version 9.3 Edition personal
Suse ≫ Suse Linux Version 9.3 Edition professional
Suse ≫ Suse Linux Version 9.3 Edition x86_64
Suse ≫ Suse Linux Version 10.0 Edition oss
Suse ≫ Suse Linux Version 10.0 Edition professional
Trustix ≫ Secure Linux Version 2.0
Trustix ≫ Secure Linux Version 2.2
Trustix ≫ Secure Linux Version 3.0
Turbolinux ≫ Turbolinux Version 10
Turbolinux ≫ Turbolinux Version fuji
Turbolinux ≫ Turbolinux Appliance Server Version 1.0_hosting_edition
Turbolinux ≫ Turbolinux Appliance Server Version 1.0_workgroup_edition
Turbolinux ≫ Turbolinux Desktop Version 10.0
Turbolinux ≫ Turbolinux Server Version 8.0
Turbolinux ≫ Turbolinux Server Version 10.0
Turbolinux ≫ Turbolinux Server Version 10.0_x86
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ia64
Ubuntu ≫ Ubuntu Linux Version 4.1 Edition ppc
Ubuntu ≫ Ubuntu Linux Version 5.04 Edition amd64
Ubuntu ≫ Ubuntu Linux Version 5.04 Edition i386
Ubuntu ≫ Ubuntu Linux Version 5.04 Edition powerpc
Ubuntu ≫ Ubuntu Linux Version 5.10 Edition amd64
Ubuntu ≫ Ubuntu Linux Version 5.10 Edition i386
Ubuntu ≫ Ubuntu Linux Version 5.10 Edition powerpc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.82% 0.89
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
http://secunia.com/advisories/18517
Patch
Vendor Advisory
http://secunia.com/advisories/18398
Patch
Vendor Advisory
http://secunia.com/advisories/18407
Patch
Vendor Advisory
http://secunia.com/advisories/25729
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1
http://www.debian.org/security/2006/dsa-936
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/427053/100/0/threaded
http://www.securityfocus.com/archive/1/427990/100/0/threaded
http://www.vupen.com/english/advisories/2007/2280
ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
http://secunia.com/advisories/18554
Patch
Vendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
http://secunia.com/advisories/19230
ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
Patch
http://secunia.com/advisories/18147
http://secunia.com/advisories/18303
Patch
Vendor Advisory
http://secunia.com/advisories/18313
Patch
Vendor Advisory
http://secunia.com/advisories/18349
Patch
Vendor Advisory
http://secunia.com/advisories/18380
http://secunia.com/advisories/18385
Patch
Vendor Advisory
http://secunia.com/advisories/18387
Patch
Vendor Advisory
http://secunia.com/advisories/18389
Patch
Vendor Advisory
http://secunia.com/advisories/18416
Patch
Vendor Advisory
http://secunia.com/advisories/18448
Patch
Vendor Advisory
http://secunia.com/advisories/18534
Patch
Vendor Advisory
http://secunia.com/advisories/18582
Patch
Vendor Advisory
http://secunia.com/advisories/18674
Vendor Advisory
http://secunia.com/advisories/18675
Vendor Advisory
http://secunia.com/advisories/18679
Vendor Advisory
http://secunia.com/advisories/18908
Vendor Advisory
http://secunia.com/advisories/18913
http://secunia.com/advisories/19377
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.472683
http://slackware.com/security/viewer.php?l=slackware-security&y=2006&m=slackware-security.474747
http://www.debian.org/security/2005/dsa-931
http://www.debian.org/security/2005/dsa-932
http://www.debian.org/security/2005/dsa-937
http://www.debian.org/security/2005/dsa-938
http://www.debian.org/security/2005/dsa-940
http://www.debian.org/security/2006/dsa-950
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-961
Patch
Vendor Advisory
http://www.debian.org/security/2006/dsa-962
http://www.gentoo.org/security/en/glsa/glsa-200601-02.xml
Patch
Vendor Advisory
http://www.kde.org/info/security/advisory-20051207-2.txt
Patch
Vendor Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2006:003
http://www.mandriva.com/security/advisories?name=MDKSA-2006:004
http://www.mandriva.com/security/advisories?name=MDKSA-2006:005
http://www.mandriva.com/security/advisories?name=MDKSA-2006:006
http://www.mandriva.com/security/advisories?name=MDKSA-2006:008
http://www.mandriva.com/security/advisories?name=MDKSA-2006:010
http://www.mandriva.com/security/advisories?name=MDKSA-2006:011
http://www.mandriva.com/security/advisories?name=MDKSA-2006:012
http://www.redhat.com/support/errata/RHSA-2006-0160.html
Patch
Vendor Advisory
http://secunia.com/advisories/18428
http://secunia.com/advisories/18436
http://scary.beasts.org/security/CESA-2005-003.txt
Exploit
http://secunia.com/advisories/18463
http://www.trustix.org/errata/2006/0002/
http://rhn.redhat.com/errata/RHSA-2006-0177.html
Patch
Vendor Advisory
http://secunia.com/advisories/18312
Patch
Vendor Advisory
http://secunia.com/advisories/18329
Vendor Advisory
http://secunia.com/advisories/18332
Vendor Advisory
http://secunia.com/advisories/18334
Patch
Vendor Advisory
http://secunia.com/advisories/18338
Patch
Vendor Advisory
http://secunia.com/advisories/18373
http://secunia.com/advisories/18375
Vendor Advisory
http://secunia.com/advisories/18414
http://secunia.com/advisories/18423
Patch
Vendor Advisory
http://secunia.com/advisories/18425
http://secunia.com/advisories/18642
Vendor Advisory
http://secunia.com/advisories/18644
Vendor Advisory
http://www.gentoo.org/security/en/glsa/glsa-200601-17.xml
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00030.html
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00031.html
http://www.redhat.com/support/errata/RHSA-2006-0163.html
http://www.securityfocus.com/bid/16143
Patch
http://www.vupen.com/english/advisories/2006/0047
https://usn.ubuntu.com/236-1/
http://secunia.com/advisories/18335
Patch
Vendor Advisory
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00010.html
Patch
http://www.redhat.com/archives/fedora-announce-list/2006-January/msg00011.html
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/24023
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9575