CVE-2007-3387 Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other...
MediumCVSS 6.8
EPSS 8.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple cups | <= 1.3.11 | No fix listed |
| freedesktop poppler | < 0.5.91 | 0.5.91 |
| gpdf project gpdf | < 2.8.2 | 2.8.2 |
| xpdfreader xpdf | = 3.02 | No fix listed |
| debian linux | = 3.1 | No fix listed |
| debian linux | = 4.0 | No fix listed |
| Canonical Ubuntu Linux | = 6.06 | No fix listed |
| Canonical Ubuntu Linux | = 6.10 | No fix listed |
| Canonical Ubuntu Linux | = 7.04 | No fix listed |
| debian/libextractor(Debian:12) | < 0.5.12-1 | 0.5.12-1 |
| debian/libextractor(Debian:13) | < 0.5.12-1 | 0.5.12-1 |
| debian/libextractor(Debian:14) | < 0.5.12-1 | 0.5.12-1 |
| debian/poppler(Debian:12) | < 0.5.4-6.1 | 0.5.4-6.1 |
| debian/poppler(Debian:13) | < 0.5.4-6.1 | 0.5.4-6.1 |
| debian/poppler(Debian:14) | < 0.5.4-6.1 | 0.5.4-6.1 |
| debian/xpdf(Debian:12) | < 3.02-1.1 | 3.02-1.1 |
| debian/xpdf(Debian:13) | < 3.02-1.1 | 3.02-1.1 |
| debian/xpdf(Debian:14) | < 3.02-1.1 | 3.02-1.1 |
References
- bugs.gentoo.org issue-tracking third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- 40127 broken-link vdb-entry
- 26188 third-party-advisory
- 26251 third-party-advisory
- 26254 third-party-advisory
- 26255 third-party-advisory
- 26257 third-party-advisory
- 26278 third-party-advisory
- 26281 third-party-advisory
- 26283 third-party-advisory
- 26292 third-party-advisory
- 26293 third-party-advisory
- 26297 third-party-advisory
- 26307 third-party-advisory
- 26318 third-party-advisory
- 26325 third-party-advisory
- 26342 third-party-advisory
- 26343 third-party-advisory
- 26358 third-party-advisory
- 26365 third-party-advisory
- 26370 third-party-advisory
- 26395 third-party-advisory
- 26403 third-party-advisory
- 26405 third-party-advisory
- 26407 third-party-advisory
- 26410 third-party-advisory
- 26413 third-party-advisory
- 26425 third-party-advisory
- 26432 third-party-advisory
- 26436 third-party-advisory
- 26467 third-party-advisory
- 26468 third-party-advisory
- 26470 third-party-advisory
- 26514 third-party-advisory
- 26607 third-party-advisory
- 26627 third-party-advisory
- 26862 third-party-advisory
- 26982 third-party-advisory
- 27156 third-party-advisory
- 27281 third-party-advisory
- 27308 third-party-advisory
- 27637 third-party-advisory
- 30168 third-party-advisory
- GLSA-200709-12 third-party-advisory vendor-advisory
- GLSA-200709-17 third-party-advisory vendor-advisory
- GLSA-200710-20 third-party-advisory vendor-advisory
- GLSA-200711-34 third-party-advisory vendor-advisory
- GLSA-200805-13 third-party-advisory vendor-advisory
- SSA:2007-316-01 third-party-advisory vendor-advisory
- sourceforge.net broken-link
- support.avaya.com third-party-advisory
- DSA-1347 third-party-advisory vendor-advisory
- DSA-1348 third-party-advisory vendor-advisory
- DSA-1349 third-party-advisory vendor-advisory
- DSA-1350 third-party-advisory vendor-advisory
- DSA-1352 third-party-advisory vendor-advisory
- DSA-1354 third-party-advisory vendor-advisory
- DSA-1355 third-party-advisory vendor-advisory
- DSA-1357 third-party-advisory vendor-advisory
- GLSA-200710-08 third-party-advisory vendor-advisory
- www.kde.org third-party-advisory
- MDKSA-2007:158 third-party-advisory vendor-advisory
- MDKSA-2007:159 third-party-advisory vendor-advisory
- MDKSA-2007:160 third-party-advisory vendor-advisory
- MDKSA-2007:161 third-party-advisory vendor-advisory
- MDKSA-2007:162 third-party-advisory vendor-advisory
- MDKSA-2007:163 third-party-advisory vendor-advisory
- MDKSA-2007:164 third-party-advisory vendor-advisory
- MDKSA-2007:165 third-party-advisory vendor-advisory
- SUSE-SR:2007:015 broken-link vendor-advisory
- SUSE-SR:2007:016 broken-link vendor-advisory
- RHSA-2007:0720 third-party-advisory vendor-advisory
- RHSA-2007:0729 third-party-advisory vendor-advisory
- RHSA-2007:0730 third-party-advisory vendor-advisory
- RHSA-2007:0731 third-party-advisory vendor-advisory
- RHSA-2007:0732 third-party-advisory vendor-advisory
- RHSA-2007:0735 third-party-advisory vendor-advisory
- 20070814 FLEA-2007-0044-1 tetex tetex-dvips tetex-fonts mailing-list third-party-advisory vdb-entry
- 20070814 FLEA-2007-0045-1 poppler mailing-list third-party-advisory vdb-entry
- 20070816 FLEA-2007-0046-1 cups mailing-list third-party-advisory vdb-entry
- 25124 third-party-advisory vdb-entry
- 1018473 third-party-advisory vdb-entry
- SSA:2007-222-05 third-party-advisory vendor-advisory
- USN-496-1 third-party-advisory vendor-advisory
- USN-496-2 third-party-advisory vendor-advisory
- ADV-2007-2704 permissions-required third-party-advisory vdb-entry
- ADV-2007-2705 permissions-required third-party-advisory vdb-entry
- issues.foresightlinux.org broken-link
- issues.rpath.com broken-link
- issues.rpath.com broken-link
- oval:org.mitre.oval:def:11149 signature third-party-advisory vdb-entry
- Debian Security Tracker CVE-2007-3387 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking