View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2005-3625 severity critical: SUSE including 15 source package names (cups-2.4.11-160000.2.2, cups-client-2.4.11-160000.2.2, …), 15 product×package rows across 4 product lines (SUSE Linux Enterprise Module for Legacy 12, SUSE Linux Enterprise Server 16.0, SUSE Linux Micro 6.0, SUSE Linux Micro 6.1): Fixed 11, Known Not Affected 4.
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins."