Quantum Secular Labs / Blog / Advisories

CVE-2005-3625: Easy Software Products Cups: Denial of service

CVE-2005-3625 has a CVSS v2 base score of 10.0 (the maximum on that scale) and affects Easy Software Products Cups, along with 27 other products in NVD’s configuration data. Per its scoring, it can be exploited over the network, without authentication. The scored impact on confidentiality, integrity and availability is the highest available.

Vulnerability description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

Severity breakdown

CVSS v2.0 10.0: AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access vector: Network. Exploitable remotely over the network.
  • Access complexity: Low. No special conditions are required.
  • Authentication: None. No authentication is needed.
  • Confidentiality impact: Complete. Total information disclosure.
  • Integrity impact: Complete. Total loss of integrity.
  • Availability impact: Complete. Total shutdown of the component.

Affected products

  • Easy Software Products Cups: 1.1.22; 1.1.22_rc1; 1.1.23; 1.1.23_rc1
  • Kde Kpdf: 3.2; 3.4.3
  • Libextractor: all versions listed by NVD
  • Poppler: 0.4.2
  • Tetex: 1.0.7; 2.0; 2.0.1; 2.0.2; 3.0
  • Xpdf: 3.0
  • Kdegraphics: 3.2; 3.4.3
  • Kde Koffice: 1.4; 1.4.1; 1.4.2
  • Kde Kword: 1.4.2
  • Sgi Propack: 3.0 sp6
  • Conectiva Linux: 10.0
  • Debian Linux: 3.0; 3.1
  • Gentoo Linux: all versions listed by NVD
  • Mandrakesoft Mandrake Linux: 10.1; 10.2; 2006
  • Mandrakesoft Mandrake Linux Corporate Server: 2.1; 3.0

References