CVE-2004-1125
- State
- Published
- Severity
- Not scored
- Published
- Dec 22, 2004
- Updated
- Aug 8, 2024
- Reserved
- Dec 2, 2004
Description
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- RHSA-2005:013vendor-advisory
- 17277third-party-advisory
- RHSA-2005:066vendor-advisory
- RHSA-2005:034vendor-advisory
- RHSA-2005:018vendor-advisory
- FLSA:2352vendor-advisory
- FLSA:2353vendor-advisory
- 1012646vdb-entry
- 12070vdb-entry
- http://www.kde.org/info/security/advisory-20041223-1.txt
- xpdf-gfx-doimage-bo(18641)vdb-entry
- GLSA-200501-17vendor-advisory
- RHSA-2005:026vendor-advisory
- RHSA-2005:053vendor-advisory
- USN-50-1vendor-advisory
- GLSA-200501-13vendor-advisory
- 20041228 KDE Security Advisory: kpdf Buffer Overflow Vulnerabilitymailing-list
- GLSA-200412-25vendor-advisory
- 20041223 [USN-48-1] xpdf, tetex-bin vulnerabilitiesmailing-list
- SUSE-SR:2005:001vendor-advisory
- RHSA-2005:354vendor-advisory
- 20041221 Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerabilitythird-party-advisory
- oval:org.mitre.oval:def:10830vdb-entrysignature
- CLA-2005:921vendor-advisory
- RHSA-2005:057vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.