CVE-2007-4352
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.0%
exploitation probability
7.0%top 6% of all CVEs
observed exploitation
nono source reports it
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
Affected products
n/a · n/aReferences
http://secunia.com/advisories/26503http://secunia.com/advisories/27260http://secunia.com/advisories/27553http://secunia.com/advisories/27573http://secunia.com/advisories/27574http://secunia.com/advisories/27575http://secunia.com/advisories/27577http://secunia.com/advisories/27578http://secunia.com/advisories/27599http://secunia.com/advisories/27615http://secunia.com/advisories/27618http://secunia.com/advisories/27619