CVE-2007-3387

CVE-2007-3387

Published · Updated

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 8.6%
exploitation probability
8.6%top 5% of all CVEs
observed exploitation
nono source reports it
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
Affected products
n/a · n/a
References
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patchftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.aschttp://bugs.gentoo.org/show_bug.cgi?id=187139http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194http://osvdb.org/40127http://secunia.com/advisories/26188http://secunia.com/advisories/26251http://secunia.com/advisories/26254http://secunia.com/advisories/26255http://secunia.com/advisories/26257http://secunia.com/advisories/26278http://secunia.com/advisories/26281