Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
xpdf Gfx.c 缓冲区溢出漏洞
Vulnerability Description
Xpdf是Foo实验室开发的一款开源的PDF阅读器，它支持解码LZW压缩格式的文件以及阅读加密的PDF文件。 Xpdf 3.00版本中fx.cc文件的Gfx::doImage()函数存在缓冲区溢出漏洞。多个使用该软件的产品(如KDE中的tetex-bin/kpdf)均存在该漏洞。 由于Gfx::doImage()函数循环的边界大于存储缓冲区，maskColors数组被填充的时候，可导致本地变量和其他栈内存覆盖，利用精心构建PDF文件，攻击者可执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A