CVEvulnerability
CVE-2007-5393
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-11-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
Affected configurations
• xpdf xpdf 3.02p11
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/26503 secunia.com
- http://secunia.com/advisories/27260 Patch, Vendor Advisory
- http://secunia.com/advisories/27553 Vendor Advisory
- http://secunia.com/advisories/27573 Vendor Advisory
- http://secunia.com/advisories/27574 secunia.com
- http://secunia.com/advisories/27575 Vendor Advisory
- http://secunia.com/advisories/27577 Vendor Advisory
- http://secunia.com/advisories/27578 Vendor Advisory
- http://secunia.com/advisories/27579 Vendor Advisory
- http://secunia.com/advisories/27599 secunia.com
- http://secunia.com/advisories/27615 secunia.com
- http://secunia.com/advisories/27618 secunia.com
- http://secunia.com/advisories/27619 secunia.com
- http://secunia.com/advisories/27632 secunia.com
- http://secunia.com/advisories/27634 secunia.com
- http://secunia.com/advisories/27636 secunia.com
- http://secunia.com/advisories/27637 secunia.com
- http://secunia.com/advisories/27640 secunia.com
- http://secunia.com/advisories/27641 secunia.com
- http://secunia.com/advisories/27642 secunia.com
- http://secunia.com/advisories/27645 secunia.com
- http://secunia.com/advisories/27656 secunia.com
- http://secunia.com/advisories/27658 secunia.com
- http://secunia.com/advisories/27705 secunia.com
- http://secunia.com/advisories/27718 secunia.com
- http://secunia.com/advisories/27721 secunia.com
- http://secunia.com/advisories/27724 secunia.com
- http://secunia.com/advisories/27743 secunia.com
- http://secunia.com/advisories/27772 secunia.com
- http://secunia.com/advisories/27856 secunia.com
- http://secunia.com/advisories/28043 secunia.com
- http://secunia.com/advisories/28812 secunia.com
- http://secunia.com/advisories/29104 secunia.com
- http://secunia.com/advisories/29604 secunia.com
- http://secunia.com/advisories/30168 secunia.com
- http://secunia.com/secunia_research/2007-88/advisory/ Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200711-22.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200711-34.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200805-13.xml security.gentoo.org
- http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882 slackware.com
- http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm support.avaya.com
- http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html support.novell.com
- http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html support.novell.com
- http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html support.novell.com
- http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html support.novell.com
- http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html support.novell.com
- http://www.debian.org/security/2007/dsa-1408 www.debian.org
- http://www.debian.org/security/2008/dsa-1480 www.debian.org
- http://www.debian.org/security/2008/dsa-1509 www.debian.org
- http://www.debian.org/security/2008/dsa-1537 www.debian.org
- http://www.kde.org/info/security/advisory-20071107-1.txt www.kde.org
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:219 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:220 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:221 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:222 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:223 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:227 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:228 www.mandriva.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 www.mandriva.com
- http://www.novell.com/linux/security/advisories/2007_60_pdf.html www.novell.com
- http://www.redhat.com/support/errata/RHSA-2007-1021.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1022.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1023.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1024.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1025.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-1026.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1027.html www.redhat.com
- http://www.redhat.com/support/errata/RHSA-2007-1028.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1029.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1030.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1031.html Vendor Advisory
- http://www.redhat.com/support/errata/RHSA-2007-1051.html Vendor Advisory
- http://www.securityfocus.com/archive/1/483372 www.securityfocus.com
- http://www.securityfocus.com/bid/26367 www.securityfocus.com
- http://www.securitytracker.com/id?1018905 www.securitytracker.com
- http://www.ubuntu.com/usn/usn-542-1 www.ubuntu.com
- http://www.ubuntu.com/usn/usn-542-2 www.ubuntu.com
- http://www.vupen.com/english/advisories/2007/3774 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3775 www.vupen.com
- http://www.vupen.com/english/advisories/2007/3776 www.vupen.com