CVE
- Id
- 13303
- CVE No.
- CVE-2005-2097
- Status
- Candidate
- Description
- xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.
- Phase
- Assigned (20050630)
- Votes
- None (candidate not yet proposed)
- Comments
Related CVE References
Id | CVE Id | CVE No. | Reference | Actions |
---|---|---|---|---|
96166 | 13303 | CVE-2005-2097 | DEBIAN:DSA-780 | View |
96167 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2005/dsa-780 | View |
96168 | 13303 | CVE-2005-2097 | DEBIAN:DSA-936 | View |
96169 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2006/dsa-936 | View |
96170 | 13303 | CVE-2005-2097 | DEBIAN:DSA-1136 | View |
96171 | 13303 | CVE-2005-2097 | URL:http://www.debian.org/security/2006/dsa-1136 | View |
96172 | 13303 | CVE-2005-2097 | FEDORA:FLSA:175404 | View |
96173 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/archive/1/archive/1/427990/100/0/threaded | View |
96174 | 13303 | CVE-2005-2097 | FEDORA:FLSA-2006:176751 | View |
96175 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/archive/1/archive/1/427053/100/0/threaded | View |
96176 | 13303 | CVE-2005-2097 | MANDRIVA:MDKSA-2005:138 | View |
96177 | 13303 | CVE-2005-2097 | URL:http://www.mandriva.com/security/advisories?name=MDKSA-2005:138 | View |
96178 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:670 | View |
96179 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-670.html | View |
96180 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:671 | View |
96181 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-671.html | View |
96182 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:706 | View |
96183 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-706.html | View |
96184 | 13303 | CVE-2005-2097 | REDHAT:RHSA-2005:708 | View |
96185 | 13303 | CVE-2005-2097 | URL:http://www.redhat.com/support/errata/RHSA-2005-708.html | View |
96186 | 13303 | CVE-2005-2097 | SCO:SCOSA-2005.42 | View |
96187 | 13303 | CVE-2005-2097 | URL:ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt | View |
96188 | 13303 | CVE-2005-2097 | SUNALERT:102972 | View |
96189 | 13303 | CVE-2005-2097 | URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102972-1 | View |
96190 | 13303 | CVE-2005-2097 | SUSE:SUSE-SR:2005:019 | View |
96191 | 13303 | CVE-2005-2097 | URL:http://www.novell.com/linux/security/advisories/2005_19_sr.html | View |
96192 | 13303 | CVE-2005-2097 | UBUNTU:USN-163-1 | View |
96193 | 13303 | CVE-2005-2097 | URL:http://www.ubuntulinux.org/support/documentation/usn/usn-163-1 | View |
96194 | 13303 | CVE-2005-2097 | BID:14529 | View |
96195 | 13303 | CVE-2005-2097 | URL:http://www.securityfocus.com/bid/14529 | View |
96196 | 13303 | CVE-2005-2097 | OVAL:oval:org.mitre.oval:def:10280 | View |
96197 | 13303 | CVE-2005-2097 | URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10280 | View |
96198 | 13303 | CVE-2005-2097 | VUPEN:ADV-2007-2280 | View |
96199 | 13303 | CVE-2005-2097 | URL:http://www.vupen.com/english/advisories/2007/2280 | View |
96200 | 13303 | CVE-2005-2097 | SECUNIA:17277 | View |
96201 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/17277 | View |
96202 | 13303 | CVE-2005-2097 | SECUNIA:18398 | View |
96203 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/18398 | View |
96204 | 13303 | CVE-2005-2097 | SECUNIA:18407 | View |
96205 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/18407 | View |
96206 | 13303 | CVE-2005-2097 | SECUNIA:21339 | View |
96207 | 13303 | CVE-2005-2097 | URL:http://secunia.com/advisories/21339 | View |
96208 | 13303 | CVE-2005-2097 | SECUNIA:25729 | View |
Related JVN
Id | JVN No. | Title | Summary | CVE No. | CVE Id | CVSS_v2 | CVSS_v3 | JVN URL | Actions |
---|---|---|---|---|---|---|---|---|---|
62283 | JVNDB-2005-000485 | Linux Kernel の keyring を破棄する処理においてカーネルがクラッシュする脆弱性 | ------------ | CVE-2005-2099 | 13303 | 5 | http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000485.html | View |