CVE-2007-3387

Опубликовано: 30 июл. 2007

Источник: nvd

CVSS2: 6.8

EPSS Низкий

Описание

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

Ссылки

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch
Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
Broken Link
http://bugs.gentoo.org/show_bug.cgi?id=187139
Issue Tracking
Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194
Issue Tracking
Third Party Advisory
http://osvdb.org/40127
Broken Link
http://secunia.com/advisories/26188
Third Party Advisory
http://secunia.com/advisories/26251
Third Party Advisory
http://secunia.com/advisories/26254
Third Party Advisory
http://secunia.com/advisories/26255
Third Party Advisory
http://secunia.com/advisories/26257
Third Party Advisory
http://secunia.com/advisories/26278
Third Party Advisory
http://secunia.com/advisories/26281
Third Party Advisory
http://secunia.com/advisories/26283
Third Party Advisory
http://secunia.com/advisories/26292
Third Party Advisory
http://secunia.com/advisories/26293
Third Party Advisory
http://secunia.com/advisories/26297
Third Party Advisory
http://secunia.com/advisories/26307
Third Party Advisory
http://secunia.com/advisories/26318
Third Party Advisory
http://secunia.com/advisories/26325
Third Party Advisory
http://secunia.com/advisories/26342
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*

Версия до 1.3.11 (включая)

cpe:2.3:a:freedesktop:poppler:*:*:*:*:*:*:*:*

Версия до 0.5.91 (исключая)

cpe:2.3:a:gpdf_project:gpdf:*:*:*:*:*:*:*:*

Версия до 2.8.2 (исключая)

cpe:2.3:a:xpdfreader:xpdf:3.02:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:3.1:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

cpe:2.3:o:canonical:ubuntu_linux:7.04:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.09498

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

CVE-2007-3387

ubuntu

больше 18 лет назад

CVE-2007-3387

redhat

больше 18 лет назад

CVE-2007-3387

debian

больше 18 лет назад

Integer overflow in the StreamPredictor::StreamPredictor function in x ...

GHSA-v25x-frpw-qg4x

github

больше 3 лет назад

ELSA-2007-0732

oracle-oval

больше 18 лет назад

ELSA-2007-0732: Important: poppler security update (IMPORTANT)

EPSS

Процентиль: 92%

0.09498

Низкий

6.8 Medium

CVSS2

Дефекты

CWE-190