NVD

Id
57457  
Name
CVE-2007-5392  
Description
Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-11-07  
Modified Date
2011-03-07  
Seq
2007-5392  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
293841 57457 CVE-2007-5392 oval:org.mitre.oval:def:10036  View
293842 57457 CVE-2007-5392 GLSA-200711-22  View
293843 57457 CVE-2007-5392 GLSA-200711-34  View
293844 57457 CVE-2007-5392 GLSA-200805-13  View
293845 57457 CVE-2007-5392 SSA:2007-316-01  View
293846 57457 CVE-2007-5392 http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html  View
293847 57457 CVE-2007-5392 http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html  View
293848 57457 CVE-2007-5392 http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html  View
293849 57457 CVE-2007-5392 http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html  View
293850 57457 CVE-2007-5392 http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html  View
293851 57457 CVE-2007-5392 DSA-1480  View
293852 57457 CVE-2007-5392 DSA-1509  View
293853 57457 CVE-2007-5392 DSA-1537  View
293854 57457 CVE-2007-5392 http://www.kde.org/info/security/advisory-20071107-1.txt  View
293855 57457 CVE-2007-5392 MDKSA-2007:219  View
293856 57457 CVE-2007-5392 MDKSA-2007:220  View
293857 57457 CVE-2007-5392 MDKSA-2007:221  View
293858 57457 CVE-2007-5392 MDKSA-2007:222  View
293859 57457 CVE-2007-5392 MDKSA-2007:223  View
293860 57457 CVE-2007-5392 MDKSA-2007:227  View
293861 57457 CVE-2007-5392 MDKSA-2007:228  View
293862 57457 CVE-2007-5392 MDKSA-2007:230  View
293863 57457 CVE-2007-5392 SUSE-SA:2007:060  View
293864 57457 CVE-2007-5392 RHSA-2007:1021  View
293865 57457 CVE-2007-5392 RHSA-2007:1022  View
293866 57457 CVE-2007-5392 RHSA-2007:1024  View
293867 57457 CVE-2007-5392 RHSA-2007:1025  View
293868 57457 CVE-2007-5392 RHSA-2007:1026  View
293869 57457 CVE-2007-5392 RHSA-2007:1027  View
293870 57457 CVE-2007-5392 RHSA-2007:1029  View
293871 57457 CVE-2007-5392 RHSA-2007:1030  View
293872 57457 CVE-2007-5392 20071107 Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilities  View
293873 57457 CVE-2007-5392 26367  View
293874 57457 CVE-2007-5392 1018905  View
293875 57457 CVE-2007-5392 USN-542-1  View
293876 57457 CVE-2007-5392 USN-542-2  View
293877 57457 CVE-2007-5392 ADV-2007-3774  View
293878 57457 CVE-2007-5392 ADV-2007-3775  View
293879 57457 CVE-2007-5392 ADV-2007-3776  View
293880 57457 CVE-2007-5392 ADV-2007-3779  View
293881 57457 CVE-2007-5392 ADV-2007-3786  View
293882 57457 CVE-2007-5392 xpdf-dctstreamreset-bo(38303)  View
293883 57457 CVE-2007-5392 https://issues.rpath.com/browse/RPL-1926  View
293884 57457 CVE-2007-5392 FEDORA-2007-4031  View
293885 57457 CVE-2007-5392 FEDORA-2007-3031  View
293886 57457 CVE-2007-5392 FEDORA-2007-3059  View
293887 57457 CVE-2007-5392 FEDORA-2007-3100  View
293888 57457 CVE-2007-5392 FEDORA-2007-3390  View
293889 57457 CVE-2007-5392 FEDORA-2007-750  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52252 JVNDB-2007-000942 Xpdf の DCTStream::reset メソッドにおける整数オーバーフローの脆弱性 Xpdf の xpdf/Stream.cc には、DCTStream::reset メソッドにおいて、不正な PDF ファイルを処理した際に、整数オーバーフローが発生する脆弱性が存在します。 CVE-2007-5392 28747 CVE-2007-5392 57457 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000942.html 2007-11-07 2008-06-20 View