VulnerabilityModified

CVE-2007-3387

MEDIUM 6.8EPSS 8.57%

Does this matter?

Lower severity and a low EPSS score (8.57%). Track it; it rarely justifies an emergency change on its own.

Description

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

CVSS 2.0: 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
EPSS: 8.57% probability · 95th percentile
CISA KEV: Not listed
Weakness: CWE-190
Affected: apple/cups · freedesktop/poppler · gpdf project/gpdf · xpdfreader/xpdf · debian/debian linux · canonical/ubuntu linux
Source: secalert@redhat.com

References

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patchBroken Link
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.ascBroken Link
http://bugs.gentoo.org/show_bug.cgi?id=187139Issue Tracking, Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194Issue Tracking, Third Party Advisory
http://osvdb.org/40127Broken Link
http://secunia.com/advisories/26188Third Party Advisory
http://secunia.com/advisories/26251Third Party Advisory
http://secunia.com/advisories/26254Third Party Advisory
http://secunia.com/advisories/26255Third Party Advisory
http://secunia.com/advisories/26257Third Party Advisory
http://secunia.com/advisories/26278Third Party Advisory
http://secunia.com/advisories/26281Third Party Advisory
http://secunia.com/advisories/26283Third Party Advisory
http://secunia.com/advisories/26292Third Party Advisory
http://secunia.com/advisories/26293Third Party Advisory
http://secunia.com/advisories/26297Third Party Advisory
http://secunia.com/advisories/26307Third Party Advisory
http://secunia.com/advisories/26318Third Party Advisory
http://secunia.com/advisories/26325Third Party Advisory
http://secunia.com/advisories/26342Third Party Advisory
http://secunia.com/advisories/26343Third Party Advisory
http://secunia.com/advisories/26358Third Party Advisory
http://secunia.com/advisories/26365Third Party Advisory
http://secunia.com/advisories/26370Third Party Advisory
http://secunia.com/advisories/26395Third Party Advisory
http://secunia.com/advisories/26403Third Party Advisory
http://secunia.com/advisories/26405Third Party Advisory
http://secunia.com/advisories/26407Third Party Advisory
http://secunia.com/advisories/26410Third Party Advisory
http://secunia.com/advisories/26413Third Party Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.