NVD

Id
52336  
Name
CVE-2007-0104  
Description
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-01-08  
Modified Date
2011-07-18  
Seq
2007-0104  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
264389 52336 CVE-2007-0104 http://docs.info.apple.com/article.html?artnum=305214  View
264390 52336 CVE-2007-0104 http://projects.info-pull.com/moab/MOAB-06-01-2007.html  View
264391 52336 CVE-2007-0104 1017514  View
264392 52336 CVE-2007-0104 http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html  View
264393 52336 CVE-2007-0104 http://www.kde.org/info/security/advisory-20070115-1.txt  View
264394 52336 CVE-2007-0104 MDKSA-2007:018  View
264395 52336 CVE-2007-0104 MDKSA-2007:019  View
264396 52336 CVE-2007-0104 MDKSA-2007:020  View
264397 52336 CVE-2007-0104 MDKSA-2007:021  View
264398 52336 CVE-2007-0104 MDKSA-2007:022  View
264399 52336 CVE-2007-0104 MDKSA-2007:024  View
264400 52336 CVE-2007-0104 SUSE-SR:2007:003  View
264401 52336 CVE-2007-0104 20070116 [KDE Security Advisory] kpdf/kword/xpdf denial of service vulnerability  View
264402 52336 CVE-2007-0104 21910  View
264403 52336 CVE-2007-0104 1017749  View
264404 52336 CVE-2007-0104 USN-410-1  View
264405 52336 CVE-2007-0104 USN-410-2  View
264406 52336 CVE-2007-0104 TA07-072A  View
264407 52336 CVE-2007-0104 ADV-2007-0203  View
264408 52336 CVE-2007-0104 ADV-2007-0212  View
264409 52336 CVE-2007-0104 ADV-2007-0244  View
264410 52336 CVE-2007-0104 ADV-2007-0930  View
264411 52336 CVE-2007-0104 multiple-vendor-pdf-code-execution(31364)  View
264412 52336 CVE-2007-0104 https://issues.rpath.com/browse/RPL-964  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51348 JVNDB-2007-000010 Xpdf および kpdf における Catalog Dictionary 処理によるサービス運用妨害 (DoS) の脆弱性 オープンソースの PDF ビューア XPDF および kpdf には、無効なツリーノードやオブジェクトを参照するような Catalog Dictionary やページ属性を持つ PDF ファイルを処理した場合、無限ループを引き起こす脆弱性が存在します。 CVE-2007-0104 23459 CVE-2007-0104 52336 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000010.html 2007-01-08 2007-04-01 View