CVE-2007-3387

Published: Jul 30, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

Affected (9)

Products: Apple: Cups · Freedesktop: Poppler · Gpdf Project: Gpdf · +3 more

Show all products

Apple: Cups · Freedesktop: Poppler · Gpdf Project: Gpdf · Xpdfreader: Xpdf · Debian: Debian Linux · Canonical: Ubuntu Linux

1 product

1 product

1 product

1 product

1 product

1 product

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Apple Cups	Up to 1.3.11
Freedesktop Poppler	Before 0.5.91
Gpdf Project Gpdf	Before 2.8.2
Xpdfreader Xpdf	Version 3.02

Configuration B

2 vulnerable

Vulnerable Software	Affected Versions
Debian Debian Linux	Version 3.1
Debian Debian Linux	Version 4.0

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Canonical Ubuntu Linux	Version 6.06
Canonical Ubuntu Linux	Version 6.10
Canonical Ubuntu Linux	Version 7.04

Related CWEs

CWE-190

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (188)

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch (unsafe URL)

Source: secalert@redhat.com

Broken Link

ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc (unsafe URL)

Source: secalert@redhat.com

Broken Link

http://bugs.gentoo.org/show_bug.cgi?id=187139

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194

Source: secalert@redhat.com

Issue TrackingThird Party Advisory

http://osvdb.org/40127

Source: secalert@redhat.com

Broken Link

http://secunia.com/advisories/26188

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26251

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26254

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26255

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26257

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26278

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26281

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26283

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26292

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26293

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26297

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26307

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26318

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26325

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26342

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26343

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26358

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26365

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26370

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26395

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26403

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26405

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26407

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26410

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26413

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26425

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26432

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26436

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26467

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26468

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26470

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26514

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26607

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26627

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26862

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/26982

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27156

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27281

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27308

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/27637

Source: secalert@redhat.com

Third Party Advisory

http://secunia.com/advisories/30168

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200709-12.xml

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200709-17.xml

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200710-20.xml

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200711-34.xml

Source: secalert@redhat.com

Third Party Advisory

http://security.gentoo.org/glsa/glsa-200805-13.xml

Source: secalert@redhat.com

Third Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882

Source: secalert@redhat.com

Third Party Advisory

http://sourceforge.net/project/shownotes.php?release_id=535497

Source: secalert@redhat.com

Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1347

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1348

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1349

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1350

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1352

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1354

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1355

Source: secalert@redhat.com

Third Party Advisory

http://www.debian.org/security/2007/dsa-1357

Source: secalert@redhat.com

Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml

Source: secalert@redhat.com

Third Party Advisory

http://www.kde.org/info/security/advisory-20070730-1.txt

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:158

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:159

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:160

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:161

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:162

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:163

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:164

Source: secalert@redhat.com

Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:165

Source: secalert@redhat.com

Third Party Advisory

http://www.novell.com/linux/security/advisories/2007_15_sr.html

Source: secalert@redhat.com

Broken Link

http://www.novell.com/linux/security/advisories/2007_16_sr.html

Source: secalert@redhat.com

Broken Link

http://www.redhat.com/support/errata/RHSA-2007-0720.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0729.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0730.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0731.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0732.html

Source: secalert@redhat.com

Third Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0735.html

Source: secalert@redhat.com

Third Party Advisory

http://www.securityfocus.com/archive/1/476508/100/0/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/476519/30/5400/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/archive/1/476765/30/5340/threaded

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/25124

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018473

Source: secalert@redhat.com

Third Party AdvisoryVDB Entry

http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-496-1

Source: secalert@redhat.com

Third Party Advisory

http://www.ubuntu.com/usn/usn-496-2

Source: secalert@redhat.com

Third Party Advisory

http://www.vupen.com/english/advisories/2007/2704

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

http://www.vupen.com/english/advisories/2007/2705

Source: secalert@redhat.com

Permissions RequiredThird Party Advisory

https://issues.foresightlinux.org/browse/FL-471

Source: secalert@redhat.com

Broken Link

https://issues.rpath.com/browse/RPL-1596

Source: secalert@redhat.com

Broken Link

https://issues.rpath.com/browse/RPL-1604

Source: secalert@redhat.com

Broken Link

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149

Source: secalert@redhat.com

Third Party Advisory

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch (unsafe URL)