See bug #99769.
Just sent an email to printing herd for help
client-based DoS -> downgrading severity
Now public
MetalGOD: want to try to apply the xpdf patch you found to this one too ?
pdftohtml is not affected, it uses xpdf2 and doesn't show the described behaviour