The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted PDF file that causes the boundaries of a maskColors array to be exceeded.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade xpdfUpgrade cups | Jul 30, 2024 | Jan 10, 2005 |
| Freebsd | — | Upgrade xpdfUpgrade teTeX-baseUpgrade pdftohtmlUpgrade kofficeUpgrade kdegraphicsUpgrade cups-baseUpgrade gpdf | Dec 10, 2025 | Dec 23, 2004 |
| Gentoo Linux | — | Upgrade kde-base/kdegraphics.Upgrade app-text/ptex.Upgrade app-text/cstetex.Upgrade app-text/xpdf.Upgrade app-text/gpdf.Upgrade app-text/pdftohtml.Upgrade net-print/cups.Upgrade app-office/koffice.Upgrade app-text/tetex. | Oct 30, 2017 | Jan 10, 2005 |
| Suse | — | Upgrade cups-libsUpgrade cups-develUpgrade cups-libs-64bitUpgrade cups-libs-x86Upgrade cups-clientUpgrade cupsUpgrade cups-libs-32bit | Feb 17, 2015 | Jan 10, 2005 |
| Ubuntu | — | Upgrade xpdf-utilsUpgrade cupsys-client | Nov 8, 2024 | Jan 10, 2005 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub