CVE-2007-4352
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.02%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
- CVSS 2.0
- 7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C
- EPSS
- 7.02% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- xpdf/xpdf
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/26503
- http://secunia.com/advisories/27260Patch, Vendor Advisory
- http://secunia.com/advisories/27553
- http://secunia.com/advisories/27573
- http://secunia.com/advisories/27574
- http://secunia.com/advisories/27575
- http://secunia.com/advisories/27577
- http://secunia.com/advisories/27578
- http://secunia.com/advisories/27599
- http://secunia.com/advisories/27615
- http://secunia.com/advisories/27618
- http://secunia.com/advisories/27619
- http://secunia.com/advisories/27632
- http://secunia.com/advisories/27634
- http://secunia.com/advisories/27636
- http://secunia.com/advisories/27637
- http://secunia.com/advisories/27640
- http://secunia.com/advisories/27641
- http://secunia.com/advisories/27642
- http://secunia.com/advisories/27645
- http://secunia.com/advisories/27656
- http://secunia.com/advisories/27658
- http://secunia.com/advisories/27705
- http://secunia.com/advisories/27721
- http://secunia.com/advisories/27724
- http://secunia.com/advisories/27743
- http://secunia.com/advisories/27856
- http://secunia.com/advisories/28043
- http://secunia.com/advisories/28812
- http://secunia.com/advisories/29104
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.