CVE-2003-1228: Mathopd

High severity, CVSS 7.5. EPSS: 14.1% chance of exploitation in the next 30 days.

Buffer overflow in the prepare_reply function in request.c for Mathopd 1.2 through 1.5b13, and possibly earlier versions, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via an HTTP request with a long path.

Affected products

• Mathopd Mathopd: from 1.2, before 1.5 (fixed in 1.5); version 1.5 only

Published 2003-12-31. Last modified 2026-06-16.