CVE-2007-5392 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Xpdf

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer10 documents8 sources
Severity
9.3CRITICALNVD
EPSS
6.6%
top 8.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Apple CupsFreedesktop PopplerGNU Libextractor+1 more
Timeline
PublishedNov 8
Latest updateMay 1

Description

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages5 packages

▶Debianxpdf/xpdf< 3.02-1.3+3
▶NVDxpdf/xpdf3.0.1_pl1
▶Debianapple/cups< 1.1.22-7+3
▶Debiangnu/libextractor< 0.5.12-1+3
▶Debianfreedesktop/poppler< 0.6.2-1+3

Patches

Patch: secunia.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

3
GHSA
GHSA-5wjr-7h39-qr5r: Integer overflow in the DCTStream::reset method in xpdf/Stream↗2022-05-01
▶
OSV
CVE-2007-5392: Integer overflow in the DCTStream::reset method in xpdf/Stream↗2007-11-08
▶
CVEList
CVE-2007-5392: Integer overflow in the DCTStream::reset method in xpdf/Stream↗2007-11-08
▶

📋Vendor Advisories

4
Ubuntu
KOffice vulnerabilities↗2007-11-15
▶
Ubuntu
poppler vulnerabilities↗2007-11-14
▶
Red Hat
DCTStream:: reset()↗2007-11-07
▶
Debian
CVE-2007-5392: cups - Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p1...↗2007
▶

💬Community

1
Bugzilla
CVE-2007-5392 xpdf buffer overflow in DCTStream::reset()↗2007-10-22
▶
CVE-2007-5392 — Xpdf vulnerability | cvebase