Xpdf as used in products such as gpdf kpdf pdftohtml poppler teTeX CUPS libextractor and others allows attackers to cause a denial of service (infinite loop) via streams that end prematurely as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams aka \Infinite CPU spins.\