CVE-2005-2097 in kpdfinfo

Summary

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Be aware that VulDB is the high quality source for vulnerability data.

Reservation

06/30/2005

Disclosure

08/16/2005

CPE

ready

CVSS

4.0

EPSS

0.00072

Activities

Very Low

Sources

Want to know what is going to be exploited?

We predict KEV entries!