CVE
- Id
- 13303
- CVE No.
- CVE-2005-2097
- Status
- Candidate
- Description
- xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
- Phase
- Assigned (20050630)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
| Id | CVE Id | CVE No. | Reference | Actions |
|---|---|---|---|---|
| 96166 | 13303 | CVE-2005-2097 | DEBIAN:DSA-780 | View |
| 96167 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2005/dsa-780 | View |
| 96168 | 13303 | CVE-2005-2097 | DEBIAN:DSA-936 | View |
| 96169 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2006/dsa-936 | View |
| 96170 | 13303 | CVE-2005-2097 | DEBIAN:DSA-1136 | View |
| 96171 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2006/dsa-1136 | View |
| 96172 | 13303 | CVE-2005-2097 | FEDORA:FLSA:175404 | View |
| 96173 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded | View |
| 96174 | 13303 | CVE-2005-2097 | FEDORA:FLSA-2006:176751 | View |
| 96175 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded | View |
| 96176 | 13303 | CVE-2005-2097 | MANDRIVA:MDKSA-2005:138 | View |
| 96177 | 13303 | CVE-2005-2097 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:138 | View |
| 96178 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:670 | View |
| 96179 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-670.html | View |
| 96180 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:671 | View |
| 96181 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-671.html | View |
| 96182 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:706 | View |
| 96183 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-706.html | View |
| 96184 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:708 | View |
| 96185 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-708.html | View |
| 96186 | 13303 | CVE-2005-2097 | SCO:SCOSA-2005.42 | View |
| 96187 | 13303 | CVE-2005-2097 | URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt | View |
| 96188 | 13303 | CVE-2005-2097 | SUNALERT:102972 | View |
| 96189 | 13303 | CVE-2005-2097 | URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 | View |
| 96190 | 13303 | CVE-2005-2097 | SUSE:SUSE-SR:2005:019 | View |
| 96191 | 13303 | CVE-2005-2097 | URL:http://www.novell.com/linux/security/advisories/2005_19_sr.html | View |
| 96192 | 13303 | CVE-2005-2097 | UBUNTU:USN-163-1 | View |
| 96193 | 13303 | CVE-2005-2097 | URL:http://www.ubuntulinux.org/support/documentation/usn/usn-163-1 | View |
| 96194 | 13303 | CVE-2005-2097 | BID:14529 | View |
| 96195 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/bid/14529 | View |
| 96196 | 13303 | CVE-2005-2097 | OVAL:oval:org.mitre.oval:def:10280 | View |
| 96197 | 13303 | CVE-2005-2097 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10280 | View |
| 96198 | 13303 | CVE-2005-2097 | VUPEN:ADV-2007-2280 | View |
| 96199 | 13303 | CVE-2005-2097 | URL:http://www.vupen.com/english/advisories/2007/2280 | View |
| 96200 | 13303 | CVE-2005-2097 | SECUNIA:17277 | View |
| 96201 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/17277 | View |
| 96202 | 13303 | CVE-2005-2097 | SECUNIA:18398 | View |
| 96203 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/18398 | View |
| 96204 | 13303 | CVE-2005-2097 | SECUNIA:18407 | View |
| 96205 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/18407 | View |
| 96206 | 13303 | CVE-2005-2097 | SECUNIA:21339 | View |
| 96207 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/21339 | View |
| 96208 | 13303 | CVE-2005-2097 | SECUNIA:25729 | View |
Related JVN
| Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
|---|---|---|---|---|---|---|---|---|---|
| 62283 | JVNDB-2005-000485 | Linux Kernel の keyring を破棄する処理においてカーネルがクラッシュする脆弱性 | ------------ | CVE-2005-2099 | 13303 | 5 | http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000485.html | View |