Buffer overflow in Xpdf

CVE-2006-0301

Heap-based buffer overflow in Splash.cc in xpdf, as used in other products such as (1) poppler, (2) kdegraphics, (3) gpdf, (4) pdfkit.framework, and others, allows attackers to cause a denial of service and possibly execute arbitrary code via crafted splash images that produce certain values that exceed the width or height of the associated bitmap.

Vulnerability class: Buffer Overflow

EPSS: 0.045 (90.5th percentile) — read the EPSS interpretation.

Affected products

  • Xpdf
  • N/a — versions n/a

Weakness classification (CWE)

References