CVE-2004-1125: Easy Software Products Cups

High severity, CVSS 9.3. EPSS: 6.6% chance of exploitation in the next 30 days.

Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.

Affected products

• Easy Software Products Cups: version 1.1.20 only
• Kde Kde: version 3.2.3 only; version 3.3.2 only
• Xpdf Xpdf: version 3.0 only

Published 2005-01-10. Last modified 2026-06-16.