CVE-2006-0301

CVE-2006-0301 describes a heap-based buffer overflow in the Splash.cc component of xpdf and its derivatives, including poppler, kdegraphics, and gpdf. This vulnerability allows attackers to trigger a denial of service and potentially execute arbitrary code by crafting malicious splash images that exceed bitmap dimensions. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and having low attack complexity, leading to potential impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.