CVE-2005-3625: Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, al...

Security readout for executives and security teams

This is a denial-of-service issue in Xpdf-derived PDF parsing code. A malformed PDF stream that ends early can make affected tools spin indefinitely, tying up CPU and potentially stalling desktop viewers, converters, print pipelines, or indexing jobs. The bundle does not identify data theft, code execution, or confirmed active exploitation. Exposure is most likely where legacy systems automatically open, convert, index, print, or extract text from untrusted PDFs using Xpdf-derived components. Modern fully patched distributions are less likely to remain affected, but the bundle does not provide complete version boundaries. Treat this as a targeted reliability risk, not a confirmed breach risk. Prioritize remediation on servers or workflows that process external PDFs automatically, especially print, indexing, document-ingestion, and conversion systems running legacy packages. Mitigation focus: Check vendor advisories for affected OS and package versions.; Update Xpdf, Poppler, KDE PDF tools, CUPS, and related PDF utilities through vendor channels.; Isolate automated PDF processing from critical services..

Prepared

Jun 29, 2026, 15:20 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.