CVE-2004-1125

Published: Jan 10, 2005Modified: Apr 16, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Affected (4)

Products: Easy Software Products: Cups · Xpdf: Xpdf · Kde: Kde

Easy Software Products

1 product

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Easy Software Products Cups	Version 1.1.20
Xpdf Xpdf	Version 3.0

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 3.2.3
Kde Kde	Version 3.3.2

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (54)

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch (unsafe URL)

Source: cve@mitre.org

ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txt (unsafe URL)

Source: cve@mitre.org

http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921

Source: cve@mitre.org

http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030241.html

Source: cve@mitre.org

http://marc.info/?t=110378596500001&r=1&w=2

Source: cve@mitre.org

http://secunia.com/advisories/17277

Source: cve@mitre.org

http://securitytracker.com/id?1012646

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200412-25.xml

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200501-13.xml

Source: cve@mitre.org

http://www.gentoo.org/security/en/glsa/glsa-200501-17.xml

Source: cve@mitre.org

http://www.idefense.com/application/poi/display?id=172&type=vulnerabilities

Source: cve@mitre.org

http://www.kde.org/info/security/advisory-20041223-1.txt

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2005_01_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-013.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-018.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-026.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-034.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-053.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-057.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-066.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2005-354.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/12070

Source: cve@mitre.org

PatchVendor Advisory

https://bugzilla.fedora.us/show_bug.cgi?id=2352

Source: cve@mitre.org

https://bugzilla.fedora.us/show_bug.cgi?id=2353

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/18641

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10830

Source: cve@mitre.org

https://usn.ubuntu.com/50-1/

Source: cve@mitre.org

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch (unsafe URL)