CVE - CVE-2005-2097

CVE-ID
CVE-2005-2097	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
MISC:102972 URL:~~http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1~~ (Obsolete source) MISC:14529 URL:http://www.securityfocus.com/bid/14529 MISC:17277 URL:http://secunia.com/advisories/17277 MISC:18398 URL:http://secunia.com/advisories/18398 MISC:18407 URL:http://secunia.com/advisories/18407 MISC:21339 URL:http://secunia.com/advisories/21339 MISC:25729 URL:http://secunia.com/advisories/25729 MISC:ADV-2007-2280 URL:~~http://www.vupen.com/english/advisories/2007/2280~~ (Obsolete source) MISC:DSA-1136 URL:http://www.debian.org/security/2006/dsa-1136 MISC:DSA-780 URL:http://www.debian.org/security/2005/dsa-780 MISC:DSA-936 URL:http://www.debian.org/security/2006/dsa-936 MISC:FLSA-2006:176751 URL:http://www.securityfocus.com/archive/1/427053/100/0/threaded MISC:FLSA:175404 URL:http://www.securityfocus.com/archive/1/427990/100/0/threaded MISC:MDKSA-2005:138 URL:~~http://www.mandriva.com/security/advisories?name=MDKSA-2005:138~~ (Obsolete source) MISC:RHSA-2005:670 URL:http://www.redhat.com/support/errata/RHSA-2005-670.html MISC:RHSA-2005:671 URL:http://www.redhat.com/support/errata/RHSA-2005-671.html MISC:RHSA-2005:706 URL:http://www.redhat.com/support/errata/RHSA-2005-706.html MISC:RHSA-2005:708 URL:http://www.redhat.com/support/errata/RHSA-2005-708.html MISC:SCOSA-2005.42 URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt MISC:SUSE-SR:2005:019 URL:http://www.novell.com/linux/security/advisories/2005_19_sr.html MISC:USN-163-1 URL:https://usn.ubuntu.com/163-1/ MISC:oval:org.mitre.oval:def:10280 URL:https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10280
Assigning CNA
Red Hat, Inc.
Date Record Created
20050630	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20050630)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)