CVE-2004-1125
Critical
Description
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
SeverityCritical
CVSS9.3
Exploit probability—
ProductXpdf
PublishedJan 10, 2005
First seenJan 10, 2005
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xpdf xpdf | 3.0 | — |
| easy_software_products cups | 1.1.20 | — |
| kde kde | 3.2.3, 3.3.2 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.