6.8

CVE-2007-0104

Exploit
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Xpdf ≫ Xpdf Version3.0
Xpdf ≫ Xpdf Version3.0.1
Xpdf ≫ Xpdf Version3.0.1_pl1
Xpdf ≫ Xpdf Version3.0.1_pl2
Xpdf ≫ Xpdf Version3.0_pl2
Kde ≫ Kde Version3.2
Kde ≫ Kde Version3.2.1
Kde ≫ Kde Version3.2.2
Kde ≫ Kde Version3.2.3
Kde ≫ Kde Version3.3
Kde ≫ Kde Version3.3.1
Kde ≫ Kde Version3.3.2
Kde ≫ Kde Version3.4
Kde ≫ Kde Version3.4.1
Kde ≫ Kde Version3.4.2
Kde ≫ Kde Version3.4.3
Kde ≫ Kde Version3.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.03% 0.924
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://docs.info.apple.com/article.html?artnum=305214
http://secunia.com/advisories/24479
Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA07-072A.html
US Government Resource
http://www.vupen.com/english/advisories/2007/0930
Vendor Advisory
http://www.novell.com/linux/security/advisories/2007_3_sr.html
http://projects.info-pull.com/moab/MOAB-06-01-2007.html
http://www.securityfocus.com/bid/21910
Exploit
http://www.securitytracker.com/id?1017749
https://exchange.xforce.ibmcloud.com/vulnerabilities/31364
http://secunia.com/advisories/23791
http://secunia.com/advisories/23799
Vendor Advisory
http://secunia.com/advisories/23808
Vendor Advisory
http://secunia.com/advisories/23813
Vendor Advisory
http://secunia.com/advisories/23815
Vendor Advisory
http://secunia.com/advisories/23839
Vendor Advisory
http://secunia.com/advisories/23844
Vendor Advisory
http://secunia.com/advisories/23876
Vendor Advisory
http://secunia.com/advisories/24204
Vendor Advisory
http://securitytracker.com/id?1017514
http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html
http://www.kde.org/info/security/advisory-20070115-1.txt
http://www.mandriva.com/security/advisories?name=MDKSA-2007:018
http://www.mandriva.com/security/advisories?name=MDKSA-2007:019
http://www.mandriva.com/security/advisories?name=MDKSA-2007:020
http://www.mandriva.com/security/advisories?name=MDKSA-2007:021
http://www.mandriva.com/security/advisories?name=MDKSA-2007:022
http://www.mandriva.com/security/advisories?name=MDKSA-2007:024
http://www.securityfocus.com/archive/1/457055/100/0/threaded
http://www.ubuntu.com/usn/usn-410-1
http://www.ubuntu.com/usn/usn-410-2
http://www.vupen.com/english/advisories/2007/0203
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0212
Vendor Advisory
http://www.vupen.com/english/advisories/2007/0244
Vendor Advisory
https://issues.rpath.com/browse/RPL-964