| Vulnerability Name: | CVE-2004-1125 (CCN-18641) | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Assigned: | 2004-12-21 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Published: | 2004-12-21 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Updated: | 2018-10-03 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Summary: | Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded. | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| CVSS v3 Severity: | 10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| CVSS v2 Severity: | 9.3 High (CVSS v2 Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C)
| ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Type: | CWE-20 | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| References: | Source: CONFIRM Type: UNKNOWN ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.00pl2.patch Source: SCO Type: UNKNOWN SCOSA-2005.42 Source: MITRE Type: CNA CVE-2004-1125 Source: CONECTIVA Type: UNKNOWN CLA-2005:921 Source: FULLDISC Type: UNKNOWN 20041223 [USN-48-1] xpdf, tetex-bin vulnerabilities Source: BUGTRAQ Type: UNKNOWN 20041228 KDE Security Advisory: kpdf Buffer Overflow Vulnerability Source: CCN Type: RHSA-2005-013 cups security update Source: CCN Type: RHSA-2005-018 xpdf security update Source: CCN Type: RHSA-2005-026 tetex security update Source: CCN Type: RHSA-2005-034 xpdf security update Source: CCN Type: RHSA-2005-053 CUPS security update Source: CCN Type: RHSA-2005-057 gpdf security update Source: CCN Type: RHSA-2005-066 kdegraphics security update Source: CCN Type: RHSA-2005-354 tetex security update Source: SECUNIA Type: UNKNOWN 17277 Source: CCN Type: SECTRACK ID: 1012646 Xpdf Buffer Overflow in doImage() Lets Remote Users Execute Arbitrary Code Source: SECTRACK Type: UNKNOWN 1012646 Source: CCN Type: CIAC Information Bulletin P-087 Buffer Overflow in xpdf Source: CCN Type: CIAC Information Bulletin P-142 XPDF/GPDF - CUPS Vulnerabilities Source: CCN Type: CIAC INFORMATION BULLETIN P-171 SGI Advanced Linux Environment 3 Security Update #33 Source: DEBIAN Type: DSA-619 xpdf -- buffer overflow Source: DEBIAN Type: DSA-621 cupsys -- buffer overflow Source: CCN Type: Xpdf Web site Xpdf: Download Source: CCN Type: GLSA-200412-24 Xpdf, GPdf: New integer overflows Source: CCN Type: GLSA-200412-25 CUPS: Multiple vulnerabilities Source: GENTOO Type: UNKNOWN GLSA-200412-25 Source: CCN Type: GLSA-200501-13 pdftohtml: Vulnerabilities in included Xpdf Source: GENTOO Type: UNKNOWN GLSA-200501-13 Source: CCN Type: GLSA-200501-17 KPdf, KOffice: More vulnerabilities in included Xpdf Source: GENTOO Type: UNKNOWN GLSA-200501-17 Source: CCN Type: GLSA-200501-31 teTeX, pTeX, CSTeX: Multiple vulnerabilities Source: CCN Type: iDEFENSE Security Advisory 12.21.04 Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability Source: IDEFENSE Type: UNKNOWN 20041221 Multiple Vendor xpdf PDF Viewer Buffer Overflow Vulnerability Source: CONFIRM Type: UNKNOWN http://www.kde.org/info/security/advisory-20041223-1.txt Source: SUSE Type: UNKNOWN SUSE-SR:2005:001 Source: REDHAT Type: UNKNOWN RHSA-2005:013 Source: REDHAT Type: UNKNOWN RHSA-2005:018 Source: REDHAT Type: UNKNOWN RHSA-2005:026 Source: REDHAT Type: UNKNOWN RHSA-2005:034 Source: REDHAT Type: UNKNOWN RHSA-2005:053 Source: REDHAT Type: UNKNOWN RHSA-2005:057 Source: REDHAT Type: UNKNOWN RHSA-2005:066 Source: REDHAT Type: UNKNOWN RHSA-2005:354 Source: BID Type: Patch, Vendor Advisory 12070 Source: CCN Type: BID-12070 XPDF DoImage Remote Buffer Overflow Vulnerability Source: CCN Type: TLSA-2005-3 Buffer overflow Source: CCN Type: USN-48-1 xpdf Source: CCN Type: USN-50-1 CUPS vulnerabilities Source: FEDORA Type: UNKNOWN FLSA:2352 Source: FEDORA Type: UNKNOWN FLSA:2353 Source: XF Type: UNKNOWN xpdf-gfx-doimage-bo(18641) Source: XF Type: UNKNOWN xpdf-gfx-doimage-bo(18641) Source: OVAL Type: UNKNOWN oval:org.mitre.oval:def:10830 Source: UBUNTU Type: UNKNOWN USN-50-1 Source: SUSE Type: SUSE-SR:2005:001 SUSE Security Summary Report Source: SUSE Type: SUSE-SR:2005:002 SUSE Security Summary Report Source: SUSE Type: SUSE-SR:2005:003 SUSE Security Summary Report Source: SUSE Type: SUSE-SR:2005:008 SUSE Security Summary Report | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Configuration 2: Configuration RedHat 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||||||||||||||||||||||||||||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||||||||||||||||||||||||||||||||||
| |||||||||||||||||||||||||||||||||||||||||||||||||||||
| BACK | |||||||||||||||||||||||||||||||||||||||||||||||||||||