CVE-2005-3625

CVE-2005-3625 is a critical-severity vulnerability in Redhat Enterprise Linux with a CVSS 2.0 base score of 10.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-399.

Key facts

• Severity: Critical (CVSS 2.0 base score 10.0)
• EPSS exploit prediction: 4% (89th percentile)
• Actively exploited: Not listed in CISA KEV
• Weakness: CWE-399
• Affected product: Redhat Enterprise Linux
• Published: 2005-12-31
• Last modified: 2026-06-16

Description

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

Frequently asked questions

What is CVE-2005-3625?

Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."

How severe is CVE-2005-3625?

CVE-2005-3625 has a CVSS 2.0 base score of 10.0, rated critical severity.

Is CVE-2005-3625 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-3625?

CVE-2005-3625 primarily affects Redhat Enterprise Linux. In total, 127 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2005-3625?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2005-3625 published?

CVE-2005-3625 was published on 2005-12-31 and last updated on 2026-06-16.

References

• ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.15/SCOSA-2006.15.txt
• ftp://patches.sgi.com/support/free/security/advisories/20051201-01-U
• ftp://patches.sgi.com/support/free/security/advisories/20060101-01-U
• ftp://patches.sgi.com/support/free/security/advisories/20060201-01-U
• http://lists.suse.com/archive/suse-security-announce/2006-Jan/0001.html
• http://rhn.redhat.com/errata/RHSA-2006-0177.html
• http://scary.beasts.org/security/CESA-2005-003.txt
• http://secunia.com/advisories/18147
• http://secunia.com/advisories/18303
• http://secunia.com/advisories/18312
• http://secunia.com/advisories/18313
• http://secunia.com/advisories/18329
• http://secunia.com/advisories/18332
• http://secunia.com/advisories/18334
• http://secunia.com/advisories/18335
• http://secunia.com/advisories/18338
• http://secunia.com/advisories/18349
• http://secunia.com/advisories/18373
• http://secunia.com/advisories/18375
• http://secunia.com/advisories/18380
• http://secunia.com/advisories/18385
• http://secunia.com/advisories/18387
• http://secunia.com/advisories/18389
• http://secunia.com/advisories/18398
• http://secunia.com/advisories/18407
• http://secunia.com/advisories/18414
• http://secunia.com/advisories/18416
• http://secunia.com/advisories/18423
• http://secunia.com/advisories/18425
• http://secunia.com/advisories/18428

Affected products (127)

• cpe:2.3:a:easy_software_products:cups:1.1.22:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.1.22_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.1.23:*:*:*:*:*:*:*
• cpe:2.3:a:easy_software_products:cups:1.1.23_rc1:*:*:*:*:*:*:*
• cpe:2.3:a:kde:kdegraphics:3.2:*:*:*:*:*:*:*
• cpe:2.3:a:kde:kdegraphics:3.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:kde:koffice:1.4:*:*:*:*:*:*:*
• cpe:2.3:a:kde:koffice:1.4.1:*:*:*:*:*:*:*
• cpe:2.3:a:kde:koffice:1.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:kde:kpdf:3.2:*:*:*:*:*:*:*
• cpe:2.3:a:kde:kpdf:3.4.3:*:*:*:*:*:*:*
• cpe:2.3:a:kde:kword:1.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:libextractor:libextractor:*:*:*:*:*:*:*:*
• cpe:2.3:a:poppler:poppler:0.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:sgi:propack:3.0:sp6:*:*:*:*:*:*
• cpe:2.3:a:tetex:tetex:1.0.7:*:*:*:*:*:*:*
• cpe:2.3:a:tetex:tetex:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:tetex:tetex:2.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:tetex:tetex:2.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:tetex:tetex:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:conectiva:linux:10.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:alpha:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:amd64:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:arm:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:hppa:*:*:*:*:*
• cpe:2.3:o:debian:debian_linux:3.1:*:ia-32:*:*:*:*:*

More vulnerabilities in Redhat Enterprise Linux

• CVE-2015-0240 — Critical (CVSS 10.0): The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before…
• CVE-2015-0408 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect…
• CVE-2014-6601 — Critical (CVSS 10.0): Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality,…
• CVE-2009-0846 — Critical (CVSS 10.0): The asn1_decode_generaltime function in lib/krb5/asn.1/asn1_decode.c in the ASN.1 GeneralizedTime decoder in MIT…
• CVE-2007-1007 — Critical (CVSS 10.0): Format string vulnerability in GnomeMeeting 1.0.2 and earlier allows remote attackers to cause a denial of service…
• CVE-2006-6235 — Critical (CVSS 10.0): A "stack overwrite" vulnerability in GnuPG (gpg) 1.x before 1.4.6, 2.x before 2.0.2, and 1.9.0 through 1.9.95 allows…

All CVEs affecting Redhat Enterprise Linux →

Other CWE-399 (Resource Management Errors) vulnerabilities

• CVE-2015-8104 — Critical (CVSS 10.0): The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a…
• CVE-2015-0339 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2015-0335 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2015-0333 — Critical (CVSS 10.0): Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before…
• CVE-2014-4121 — Critical (CVSS 10.0): Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 does not properly parse internationalized…
• CVE-2014-0560 — Critical (CVSS 10.0): Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows and OS…

Browse all CWE-399 (Resource Management Errors) vulnerabilities →