CVE-2004-1125: Input Validation
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1125?
CVE-2004-1125 has a high severity as it can lead to application crashes and potential arbitrary code execution.
How do I fix CVE-2004-1125?
To fix CVE-2004-1125, update to the latest versions of affected software such as Xpdf and KDE.
What products are affected by CVE-2004-1125?
CVE-2004-1125 affects Xpdf 3.0, KDE versions 3.2.x to 3.2.3, and 3.3.x to 3.3.2.
What type of attack is facilitated by CVE-2004-1125?
CVE-2004-1125 allows remote attackers to exploit a buffer overflow, potentially leading to denial of service or code execution.
Can CVE-2004-1125 be exploited remotely?
Yes, CVE-2004-1125 can be exploited remotely through crafted PDF files.