CVE-2007-0104

Published Jan 9, 2007

Last updated 6 years ago

Overview

Description: The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-20

Vendor comments

Red HatNot Vulnerable. This flaw is the result of an infinite recursion flaw in xpdf, which cannot result in arbitrary code execution.

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:xpdf:xpdf:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7B93B3ED-AF82-49A9-8C7F-E5F652F19669"
          },
          {
            "criteria": "cpe:2.3:a:xpdf:xpdf:3.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "2B77866E-6818-4DE6-9457-39416871952C"
          },
          {
            "criteria": "cpe:2.3:a:xpdf:xpdf:3.0.1_pl1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B0A09900-C462-4E3D-9399-0271F91DC5BD"
          },
          {
            "criteria": "cpe:2.3:a:xpdf:xpdf:3.0.1_pl2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0E99D1B2-0FDB-4E39-84FD-B354F808651E"
          },
          {
            "criteria": "cpe:2.3:a:xpdf:xpdf:3.0_pl2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F6D23CF8-2B6C-4D2A-8E5E-6AACE99A7C19"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:kde:kde:3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "82F69843-978D-4686-BC5B-1D09DA4A21BD"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.2.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ACEE0AED-7918-41E9-A902-AC4070E03132"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.2.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "81E19472-47B4-4398-A188-CA5A5D3E7060"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.2.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D17407A2-089E-43A5-9BD5-EFF966F5CC16"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9C4B436D-8D6A-473E-B707-26147208808B"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E26B353-4985-4116-B97A-5767CDC732F1"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9F7180B3-03AC-427C-8CAD-FE06F81C4FF1"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "442021C9-BE4D-4BC9-8114-8BEFA9EC1232"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7036AE90-C7E0-48CE-805D-3F1E04852675"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8D49AE92-BA00-4A8E-BBFE-1BE994CFA3CF"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "29911CA1-ECFD-476F-8C85-EA0C6C143DC5"
          },
          {
            "criteria": "cpe:2.3:o:kde:kde:3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D17CEFEB-9166-4426-92E1-D8F61D5F5D4C"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Vendor comments

Configurations

References