CVE-2007-5392 Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
HighCVSS 9.3
EPSS 6.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xpdf | = 3.0.1_pl1 | No fix listed |
| debian/cups(Debian:12) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:13) | < 1.1.22-7 | 1.1.22-7 |
| debian/cups(Debian:14) | < 1.1.22-7 | 1.1.22-7 |
| debian/libextractor(Debian:12) | < 0.5.12-1 | 0.5.12-1 |
| debian/libextractor(Debian:13) | < 0.5.12-1 | 0.5.12-1 |
| debian/libextractor(Debian:14) | < 0.5.12-1 | 0.5.12-1 |
| debian/poppler(Debian:12) | < 0.6.2-1 | 0.6.2-1 |
| debian/poppler(Debian:13) | < 0.6.2-1 | 0.6.2-1 |
| debian/poppler(Debian:14) | < 0.6.2-1 | 0.6.2-1 |
| debian/xpdf(Debian:12) | < 3.02-1.3 | 3.02-1.3 |
| debian/xpdf(Debian:13) | < 3.02-1.3 | 3.02-1.3 |
| debian/xpdf(Debian:14) | < 3.02-1.3 | 3.02-1.3 |
References
- 26503 third-party-advisory vendor-advisory
- 27260 patch third-party-advisory vendor-advisory
- 27553 third-party-advisory vendor-advisory
- 27573 third-party-advisory vendor-advisory
- 27574 third-party-advisory vendor-advisory
- 27575 third-party-advisory vendor-advisory
- 27577 third-party-advisory vendor-advisory
- 27578 third-party-advisory vendor-advisory
- 27599 third-party-advisory vendor-advisory
- 27615 third-party-advisory vendor-advisory
- 27618 third-party-advisory vendor-advisory
- 27619 third-party-advisory vendor-advisory
- 27632 third-party-advisory
- 27634 third-party-advisory
- 27636 third-party-advisory
- 27637 third-party-advisory vendor-advisory
- 27640 third-party-advisory vendor-advisory
- 27641 third-party-advisory
- 27642 third-party-advisory
- 27645 third-party-advisory
- 27656 third-party-advisory
- 27658 third-party-advisory
- 27705 third-party-advisory
- 27721 third-party-advisory
- 27724 third-party-advisory
- 27743 third-party-advisory
- 27856 third-party-advisory
- 28043 third-party-advisory
- 28812 third-party-advisory
- 29104 third-party-advisory
- 29604 third-party-advisory
- 30168 third-party-advisory
- secunia.com vendor-advisory
- GLSA-200711-22 vendor-advisory
- GLSA-200711-34 vendor-advisory
- GLSA-200805-13 vendor-advisory
- SSA:2007-316-01 vendor-advisory
- support.novell.com
- support.novell.com
- support.novell.com
- support.novell.com
- support.novell.com
- DSA-1480 vendor-advisory
- DSA-1509 vendor-advisory
- DSA-1537 vendor-advisory
- www.kde.org
- MDKSA-2007:219 vendor-advisory
- MDKSA-2007:220 vendor-advisory
- MDKSA-2007:221 vendor-advisory
- MDKSA-2007:222 vendor-advisory
- MDKSA-2007:223 vendor-advisory
- MDKSA-2007:227 vendor-advisory
- MDKSA-2007:228 vendor-advisory
- MDKSA-2007:230 vendor-advisory
- SUSE-SA:2007:060 vendor-advisory
- RHSA-2007:1021 vendor-advisory
- RHSA-2007:1022 vendor-advisory
- RHSA-2007:1024 vendor-advisory
- RHSA-2007:1025 vendor-advisory
- RHSA-2007:1026 vendor-advisory
- RHSA-2007:1027 vendor-advisory
- RHSA-2007:1029 vendor-advisory
- RHSA-2007:1030 vendor-advisory
- 20071107 Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities mailing-list
- 26367 vdb-entry
- 1018905 vdb-entry
- USN-542-1 vendor-advisory
- USN-542-2 vendor-advisory
- ADV-2007-3774 vdb-entry
- ADV-2007-3775 vdb-entry
- ADV-2007-3776 vdb-entry
- ADV-2007-3779 vdb-entry
- ADV-2007-3786 vdb-entry
- xpdf-dctstreamreset-bo(38303) vdb-entry
- issues.rpath.com
- oval:org.mitre.oval:def:10036 signature vdb-entry
- FEDORA-2007-4031 vendor-advisory
- FEDORA-2007-3031 vendor-advisory
- FEDORA-2007-3059 vendor-advisory
- FEDORA-2007-3100 vendor-advisory
- FEDORA-2007-3390 vendor-advisory
- FEDORA-2007-750 vendor-advisory
- Debian Security Tracker CVE-2007-5392 vendor-advisory
- bugs.debian.org issue-tracking
- bugs.debian.org issue-tracking