NVD

Id
55539  
Name
CVE-2007-3387  
Description
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-30  
Modified Date
2011-03-07  
Seq
2007-3387  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
282327 55539 CVE-2007-3387 ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch  View
282328 55539 CVE-2007-3387 20070801-01-P  View
282329 55539 CVE-2007-3387 http://bugs.gentoo.org/show_bug.cgi?id=187139  View
282330 55539 CVE-2007-3387 http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194  View
282331 55539 CVE-2007-3387 oval:org.mitre.oval:def:11149  View
282332 55539 CVE-2007-3387 GLSA-200709-12  View
282333 55539 CVE-2007-3387 GLSA-200709-17  View
282334 55539 CVE-2007-3387 GLSA-200710-20  View
282335 55539 CVE-2007-3387 GLSA-200711-34  View
282336 55539 CVE-2007-3387 GLSA-200805-13  View
282337 55539 CVE-2007-3387 SSA:2007-316-01  View
282338 55539 CVE-2007-3387 http://sourceforge.net/project/shownotes.php?release_id=535497  View
282339 55539 CVE-2007-3387 http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm  View
282340 55539 CVE-2007-3387 DSA-1347  View
282341 55539 CVE-2007-3387 DSA-1348  View
282342 55539 CVE-2007-3387 DSA-1349  View
282343 55539 CVE-2007-3387 DSA-1350  View
282344 55539 CVE-2007-3387 DSA-1352  View
282345 55539 CVE-2007-3387 DSA-1354  View
282346 55539 CVE-2007-3387 DSA-1355  View
282347 55539 CVE-2007-3387 DSA-1357  View
282348 55539 CVE-2007-3387 GLSA-200710-08  View
282349 55539 CVE-2007-3387 http://www.kde.org/info/security/advisory-20070730-1.txt  View
282350 55539 CVE-2007-3387 MDKSA-2007:158  View
282351 55539 CVE-2007-3387 MDKSA-2007:159  View
282352 55539 CVE-2007-3387 MDKSA-2007:160  View
282353 55539 CVE-2007-3387 MDKSA-2007:161  View
282354 55539 CVE-2007-3387 MDKSA-2007:162  View
282355 55539 CVE-2007-3387 MDKSA-2007:163  View
282356 55539 CVE-2007-3387 MDKSA-2007:164  View
282357 55539 CVE-2007-3387 MDKSA-2007:165  View
282358 55539 CVE-2007-3387 SUSE-SR:2007:015  View
282359 55539 CVE-2007-3387 SUSE-SR:2007:016  View
282360 55539 CVE-2007-3387 RHSA-2007:0720  View
282361 55539 CVE-2007-3387 RHSA-2007:0729  View
282362 55539 CVE-2007-3387 RHSA-2007:0730  View
282363 55539 CVE-2007-3387 RHSA-2007:0731  View
282364 55539 CVE-2007-3387 RHSA-2007:0732  View
282365 55539 CVE-2007-3387 RHSA-2007:0735  View
282366 55539 CVE-2007-3387 20070814 FLEA-2007-0044-1 tetex tetex-dvips tetex-fonts  View
282367 55539 CVE-2007-3387 20070814 FLEA-2007-0045-1 poppler  View
282368 55539 CVE-2007-3387 20070816 FLEA-2007-0046-1 cups  View
282369 55539 CVE-2007-3387 25124  View
282370 55539 CVE-2007-3387 1018473  View
282371 55539 CVE-2007-3387 SSA:2007-222-05  View
282372 55539 CVE-2007-3387 USN-496-1  View
282373 55539 CVE-2007-3387 USN-496-2  View
282374 55539 CVE-2007-3387 ADV-2007-2704  View
282375 55539 CVE-2007-3387 ADV-2007-2705  View
282376 55539 CVE-2007-3387 https://issues.foresightlinux.org/browse/FL-471  View
282377 55539 CVE-2007-3387 https://issues.rpath.com/browse/RPL-1596  View
282378 55539 CVE-2007-3387 https://issues.rpath.com/browse/RPL-1604  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51903 JVNDB-2007-000566 gpdf における整数オーバーフローの脆弱性 gpdf の StreamPredictor::StreamPredictor() 関数には PDF ファイルの取り扱いに不備があり、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-3387 26742 CVE-2007-3387 55539 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000566.html 2007-07-30 2008-06-20 View