CVE-2004-1125
CVE-2004-1125
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
Productos afectados
n/a · n/a¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patchftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.42/SCOSA-2005.42.txthttp://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000921http://lists.grok.org.uk/pipermail/full-disclosure/2004-December/030241.htmlhttp://marc.info/?t=110378596500001&r=1&w=2https://bugzilla.fedora.us/show_bug.cgi?id=2352https://bugzilla.fedora.us/show_bug.cgi?id=2353http://secunia.com/advisories/17277http://securitytracker.com/id?1012646https://exchange.xforce.ibmcloud.com/vulnerabilities/18641https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10830https://usn.ubuntu.com/50-1/