Every CVE Search/ Get API key

CVE-2004-1125

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that...

9.3 HighFix available

CVE-2004-1125 is a high vulnerability (CVSS 9.3) in Kde, published December 22, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 6.58%, the 93rd percentile. Fixed in cups 1.1.22-2.

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Exploit likelihood

6.58%Unchanged since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
CVE-2004-1125
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
CVE-2004-1125
Updated
2026-11-02
EUVDEUVD-2004-1123 No score

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
EUVD-2004-1123
Updated
2026-11-03
GitHub AdvisoriesGHSA-68gp-v694-mxpq No score

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that...

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
GHSA-68gp-v694-mxpq
Weakness
CWE-20
Updated
2026-11-02
OSV No score

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
CVE-2004-1125
Updated
2026-11-02
OSVDEBIAN-CVE-2004-1125 No score

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Record
DEBIAN-CVE-2004-1125
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
cups
Debian:12
 before 1.1.22-2
1.1.22-2
cups
Debian:13
 before 1.1.22-2
1.1.22-2
cups
Debian:14
 before 1.1.22-2
1.1.22-2
xpdf
Debian:12
 before 3.00-11
3.00-11
xpdf
Debian:13
 before 3.00-11
3.00-11
xpdf
Debian:14
 before 3.00-11
3.00-11
xpdf
Debian:3.0
 before 1.00-3.3, plus listed versions
1.00-3.2
1.00-3.3
cupsys
Debian:3.0
 before 1.1.14-5woody11, plus listed versions
1.1.14-5woody10
1.1.14-5woody11
cups
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
Show 126 moreShow less
Affected packages
PackageAffectedFixed
cups-devel
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-libs
Red Hat:enterprise_linux:3::as
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-devel
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-libs
Red Hat:enterprise_linux:3::desktop
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-devel
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-libs
Red Hat:enterprise_linux:3::es
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-devel
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
cups-libs
Red Hat:enterprise_linux:3::ws
 before 1:1.1.17-13.3.22
1:1.1.17-13.3.22
xpdf
Red Hat:enterprise_linux:3::as
 before 1:2.02-9.4
1:2.02-9.4
xpdf-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:2.02-9.4
1:2.02-9.4
xpdf
Red Hat:enterprise_linux:3::desktop
 before 1:2.02-9.4
1:2.02-9.4
xpdf-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:2.02-9.4
1:2.02-9.4
xpdf
Red Hat:enterprise_linux:3::es
 before 1:2.02-9.4
1:2.02-9.4
xpdf-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:2.02-9.4
1:2.02-9.4
xpdf
Red Hat:enterprise_linux:3::ws
 before 1:2.02-9.4
1:2.02-9.4
xpdf-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:2.02-9.4
1:2.02-9.4
tetex
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-afm
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-doc
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-dvips
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-fonts
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-latex
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
tetex-xdvi
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.EL4.4
0:2.0.2-22.EL4.4
xpdf
Red Hat:enterprise_linux:4::as
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::desktop
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::es
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:3.00-11.5
1:3.00-11.5
xpdf
Red Hat:enterprise_linux:4::ws
 before 1:3.00-11.5
1:3.00-11.5
xpdf-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:3.00-11.5
1:3.00-11.5
cups
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::as
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::desktop
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::es
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-devel
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
cups-libs
Red Hat:enterprise_linux:4::ws
 before 1:1.1.22-0.rc1.9.6
1:1.1.22-0.rc1.9.6
gpdf
Red Hat:enterprise_linux:4::as
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::es
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf
Red Hat:enterprise_linux:4::ws
 before 0:2.8.2-4.3
0:2.8.2-4.3
gpdf-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.8.2-4.3
0:2.8.2-4.3
kdegraphics
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::as
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::desktop
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::es
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-debuginfo
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.3
7:3.3.1-3.3
kdegraphics-devel
Red Hat:enterprise_linux:4::ws
 before 7:3.3.1-3.3
7:3.3.1-3.3
tetex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-afm
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-dvips
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-fonts
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-latex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7
tetex-xdvi
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.7
0:1.0.7-67.7

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 108 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open