CVE-2007-4352
- State
- Published
- Severity
- Not scored
- Published
- Nov 8, 2007
- Updated
- Aug 7, 2024
- Reserved
- Aug 14, 2007
Description
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- SUSE-SA:2007:060vendor-advisory
- 27632third-party-advisory
- 27743third-party-advisory
- MDKSA-2007:222vendor-advisory
- ADV-2007-3774vdb-entry
- 27260third-party-advisory
- 27856third-party-advisory
- http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html
- 27636third-party-advisory
- 29604third-party-advisory
- MDKSA-2007:223vendor-advisory
- 27721third-party-advisory
- 27724third-party-advisory
- ADV-2007-3776vdb-entry
- FEDORA-2007-3059vendor-advisory
- 27577third-party-advisory
- 29104third-party-advisory
- FEDORA-2007-3031vendor-advisory
- xpdf-dctstreamread-memory-corruption(38306)vdb-entry
- 27618third-party-advisory
- 27642third-party-advisory
- FEDORA-2007-4031vendor-advisory
- 27656third-party-advisory
- http://secunia.com/secunia_research/2007-88/advisory/
- FEDORA-2007-3100vendor-advisory
- http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html
- RHSA-2007:1026vendor-advisory
- DSA-1509vendor-advisory
- RHSA-2007:1022vendor-advisory
- 27573third-party-advisory
- RHSA-2007:1029vendor-advisory
- 27641third-party-advisory
- GLSA-200805-13vendor-advisory
- 28812third-party-advisory
- DSA-1537vendor-advisory
- FEDORA-2007-750vendor-advisory
- SSA:2007-316-01vendor-advisory
- 26367vdb-entry
- 27615third-party-advisory
- RHSA-2007:1021vendor-advisory
- ADV-2007-3786vdb-entry
- 27645third-party-advisory
- 20071107 Secunia Research: Xpdf "Stream.cc" Multiple Vulnerabilitiesmailing-list
- 30168third-party-advisory
- 27574third-party-advisory
- https://issues.rpath.com/browse/RPL-1926
- 26503third-party-advisory
- MDKSA-2007:219vendor-advisory
- DSA-1480vendor-advisory
- GLSA-200711-22vendor-advisory
- 27634third-party-advisory
- MDKSA-2007:227vendor-advisory
- http://www.kde.org/info/security/advisory-20071107-1.txt
- 28043third-party-advisory
- 27619third-party-advisory
- MDKSA-2007:220vendor-advisory
- 27705third-party-advisory
- 27578third-party-advisory
- 27640third-party-advisory
- http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html
- http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html
- GLSA-200711-34vendor-advisory
- 27599third-party-advisory
- 27575third-party-advisory
- 1018905vdb-entry
- http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html
- oval:org.mitre.oval:def:9979vdb-entrysignature
- FEDORA-2007-3390vendor-advisory
- MDKSA-2007:228vendor-advisory
- ADV-2007-3775vdb-entry
- RHSA-2007:1027vendor-advisory
- RHSA-2007:1030vendor-advisory
- USN-542-1vendor-advisory
- 27658third-party-advisory
- RHSA-2007:1024vendor-advisory
- MDKSA-2007:230vendor-advisory
- USN-542-2vendor-advisory
- RHSA-2007:1025vendor-advisory
- ADV-2007-3779vdb-entry
- MDKSA-2007:221vendor-advisory
- 27553third-party-advisory
- 27637third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.