CVE-2007-3387
Medium
Description
Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
SeverityMedium
CVSS6.8
Exploit probability—
Product
Apple Cups
PublishedJul 30, 2007
First seenJul 30, 2007
How to fix
Update
- freedesktop poppler0.5.91 or later
- gpdf_project gpdf2.8.2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple cups | v ≤ 1.3.11 | — |
| freedesktop poppler | v < 0.5.91 | 0.5.91 |
| gpdf_project gpdf | v < 2.8.2 | 2.8.2 |
| xpdfreader xpdf | 3.02 | — |
| debian debian_linux | 3.1, 4.0 | — |
| canonical ubuntu_linux | 6.06, 6.10, 7.04 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.