CVEvulnerability
CVE-2007-0103
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-01-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Affected configurations
• adobe acrobat reader (<= 7.0.8)
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://docs.info.apple.com/article.html?artnum=305214 docs.info.apple.com
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html projects.info-pull.com
- http://secunia.com/advisories/24479 secunia.com
- http://www.securityfocus.com/bid/21910 Exploit
- http://www.securitytracker.com/id?1017749 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0930 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 exchange.xforce.ibmcloud.com
- http://docs.info.apple.com/article.html?artnum=305214 docs.info.apple.com
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html projects.info-pull.com
- http://secunia.com/advisories/24479 secunia.com
- http://www.securityfocus.com/bid/21910 Exploit
- http://www.securitytracker.com/id?1017749 www.securitytracker.com
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html US Government Resource
- http://www.vupen.com/english/advisories/2007/0930 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 exchange.xforce.ibmcloud.com