Every CVE Search/ Get API key

CVE-2005-2097

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to...

2.1 LowFix available

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Exploit likelihood

0.43%Down 1.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
CVE-2005-2097
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:N/A:P
Updated
2026-11-02
CVE List No score

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
CVE-2005-2097
Updated
2026-11-02
EUVDEUVD-2005-2098 No score

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
EUVD-2005-2098
Updated
2026-11-03
GitHub AdvisoriesGHSA-x6fq-2ggv-xgcv No score

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to...

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
GHSA-x6fq-2ggv-xgcv
Updated
2026-11-02
OSV No score

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
CVE-2005-2097
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2097 No score

xpdf and kpdf do not properly validate the "loca" table in PDF files, which allows local users to cause a denial of service (disk consumption and hang) via a PDF file with a "broken" loca table, which causes a large temporary file to be created when xpdf attempts to reconstruct the information.

Record
DEBIAN-CVE-2005-2097
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
Debian:12
 before 1.1.22-7
1.1.22-7
cups
Debian:13
 before 1.1.22-7
1.1.22-7
cups
Debian:14
 before 1.1.22-7
1.1.22-7
libextractor
Debian:12
 before 0.5.8-1
0.5.8-1
libextractor
Debian:13
 before 0.5.8-1
0.5.8-1
libextractor
Debian:14
 before 0.5.8-1
0.5.8-1
poppler
Debian:12
 before 0.4.0-1
0.4.0-1
poppler
Debian:13
 before 0.4.0-1
0.4.0-1
poppler
Debian:14
 before 0.4.0-1
0.4.0-1
xpdf
Debian:12
 before 3.00-15
3.00-15
Show 68 moreShow less
Affected packages
PackageAffectedFixed
xpdf
Debian:13
 before 3.00-15
3.00-15
xpdf
Debian:14
 before 3.00-15
3.00-15
gpdf
Debian:3.1
 before 2.8.2-1.2sarge5, plus listed versions
2.8.2-1.22.8.2-1.2sarge12.8.2-1.2sarge22.8.2-1.2sarge32.8.2-1.2sarge4
2.8.2-1.2sarge5
kdegraphics
Debian:3.1
 before 4:3.3.2-2sarge1, plus listed versions
4:3.3.2-2
4:3.3.2-2sarge1
libextractor
Debian:3.1
 before 0.4.2-2sarge2, plus listed versions
0.4.2-20.4.2-2sarge1
0.4.2-2sarge2
gpdf
Debian:3.1
 before 2.8.2-1.2sarge4, plus listed versions
2.8.2-1.22.8.2-1.2sarge12.8.2-1.2sarge22.8.2-1.2sarge3
2.8.2-1.2sarge4
xpdf
Debian:3.1
 before 3.00-13.6, plus listed versions
3.00-133.00-13.13.00-13.23.00-13.33.00-13.43.00-13.5
3.00-13.6
gpdf
Debian:4.0
 before 2.10.0-1+etch1, plus listed versions
2.10.0-12.8.2-1.12.8.2-1.22.8.2-1.2sarge12.8.2-1.2sarge2
Show 5 moreShow less
2.8.2-1.2sarge32.8.2-1.2sarge42.8.2-1.2sarge52.8.2-1.2sarge62.8.2-1.3
2.10.0-1+etch1
xpdf
Red Hat:enterprise_linux:4::as
 before 1:3.00-11.8
1:3.00-11.8
xpdf-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:3.00-11.8
1:3.00-11.8
xpdf
Red Hat:enterprise_linux:4::desktop
 before 1:3.00-11.8
1:3.00-11.8
xpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:3.00-11.8
1:3.00-11.8
xpdf
Red Hat:enterprise_linux:4::es
 before 1:3.00-11.8
1:3.00-11.8
xpdf-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:3.00-11.8
1:3.00-11.8
xpdf
Red Hat:enterprise_linux:4::ws
 before 1:3.00-11.8
1:3.00-11.8
xpdf-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:3.00-11.8
1:3.00-11.8
kdegraphics
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-devel
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-devel
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-devel
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.4
7:3.3.1-3.4
kdegraphics-devel
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.4
7:3.3.1-3.4
cups
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-devel
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-libs
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-devel
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-libs
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-devel
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-libs
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-devel
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups-libs
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.31
1:1.1.17-13.3.31
cups
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-devel
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-libs
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-devel
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-libs
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-devel
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-libs
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-devel
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
cups-libs
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.7
1:1.1.22-0.rc1.9.7
gpdf
Red Hat:enterprise_linux:4::as
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf
Red Hat:enterprise_linux:4::es
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf
Red Hat:enterprise_linux:4::ws
 before 0:2.8.2-4.4
0:2.8.2-4.4
gpdf-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.8.2-4.4
0:2.8.2-4.4

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-2097 is a low vulnerability (CVSS 2.1) in Kde Kpdf, published January 25, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.43%, the 37th percentile. Fixed in cups 1.1.22-7.

References

Show 34 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open