CVE-2007-0104

Published: Jan 9, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.

Affected (17)

Products: Xpdf: Xpdf · Kde: Kde

1 product

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Xpdf Xpdf	Version 3.0.1
Xpdf Xpdf	Version 3.0.1_pl1
Xpdf Xpdf	Version 3.0.1_pl2
Xpdf Xpdf	Version 3.0
Xpdf Xpdf	Version 3.0_pl2

Configuration B

12 vulnerable

Vulnerable Software	Affected Versions
Kde Kde	Version 3.2.1
Kde Kde	Version 3.2.2
Kde Kde	Version 3.2.3
Kde Kde	Version 3.2
Kde Kde	Version 3.3.1
Kde Kde	Version 3.3.2
Kde Kde	Version 3.3
Kde Kde	Version 3.4.1
Kde Kde	Version 3.4.2
Kde Kde	Version 3.4.3
Kde Kde	Version 3.4
Kde Kde	Version 3.5

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (68)

http://docs.info.apple.com/article.html?artnum=305214

Source: cve@mitre.org

http://projects.info-pull.com/moab/MOAB-06-01-2007.html

Source: cve@mitre.org

http://secunia.com/advisories/23791

Source: cve@mitre.org

http://secunia.com/advisories/23799

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23808

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23813

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23815

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23839

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23844

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/23876

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24204

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/24479

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1017514

Source: cve@mitre.org

http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html

Source: cve@mitre.org

http://www.kde.org/info/security/advisory-20070115-1.txt

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:018

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:019

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:020

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:021

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:022

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:024

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_3_sr.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/457055/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21910

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1017749

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-410-1

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-410-2

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2007/0203

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/0212

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/0244

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/0930

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/31364

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-964

Source: cve@mitre.org

http://docs.info.apple.com/article.html?artnum=305214