CVE-2007-5393

Published: Nov 8, 2007Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.

Affected (1)

Products: Xpdf: Xpdf

Xpdf

1 product

Xpdf

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Xpdf Xpdf	Version 3.02p11

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (182)

http://secunia.com/advisories/26503

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27260

Source: PSIRT-CNA@flexerasoftware.com

PatchVendor Advisory

http://secunia.com/advisories/27553

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27573

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27574

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27575

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27577

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27578

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27579

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://secunia.com/advisories/27599

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27615

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27618

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27619

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27632

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27634

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27636

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27637

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27640

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27641

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27642

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27645

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27656

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27658

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27705

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27718

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27721

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27724

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27743

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27772

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/27856

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/28043

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/28812

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/29104

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/29604

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/30168

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/secunia_research/2007-88/advisory/

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200711-22.xml

Source: PSIRT-CNA@flexerasoftware.com

http://security.gentoo.org/glsa/glsa-200711-34.xml

Source: PSIRT-CNA@flexerasoftware.com

http://security.gentoo.org/glsa/glsa-200805-13.xml

Source: PSIRT-CNA@flexerasoftware.com

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882

Source: PSIRT-CNA@flexerasoftware.com

http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm

Source: PSIRT-CNA@flexerasoftware.com

http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html

Source: PSIRT-CNA@flexerasoftware.com

http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html

Source: PSIRT-CNA@flexerasoftware.com

http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html

Source: PSIRT-CNA@flexerasoftware.com

http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html

Source: PSIRT-CNA@flexerasoftware.com

http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2007/dsa-1408

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2008/dsa-1480

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2008/dsa-1509

Source: PSIRT-CNA@flexerasoftware.com

http://www.debian.org/security/2008/dsa-1537

Source: PSIRT-CNA@flexerasoftware.com

http://www.kde.org/info/security/advisory-20071107-1.txt

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:219

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:220

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:221

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:222

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:223

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:227

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:228

Source: PSIRT-CNA@flexerasoftware.com

http://www.mandriva.com/security/advisories?name=MDKSA-2007:230

Source: PSIRT-CNA@flexerasoftware.com

http://www.novell.com/linux/security/advisories/2007_60_pdf.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1021.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1022.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1023.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1024.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1025.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1026.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1027.html

Source: PSIRT-CNA@flexerasoftware.com

http://www.redhat.com/support/errata/RHSA-2007-1028.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1029.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1030.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1031.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.redhat.com/support/errata/RHSA-2007-1051.html

Source: PSIRT-CNA@flexerasoftware.com

Vendor Advisory

http://www.securityfocus.com/archive/1/483372

Source: PSIRT-CNA@flexerasoftware.com

http://www.securityfocus.com/bid/26367

Source: PSIRT-CNA@flexerasoftware.com

http://www.securitytracker.com/id?1018905

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-542-1

Source: PSIRT-CNA@flexerasoftware.com

http://www.ubuntu.com/usn/usn-542-2

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3774

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3775

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3776

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3779

Source: PSIRT-CNA@flexerasoftware.com

http://www.vupen.com/english/advisories/2007/3786

Source: PSIRT-CNA@flexerasoftware.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/38304

Source: PSIRT-CNA@flexerasoftware.com

https://issues.rpath.com/browse/RPL-1926

Source: PSIRT-CNA@flexerasoftware.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9839

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

Source: PSIRT-CNA@flexerasoftware.com

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

Source: PSIRT-CNA@flexerasoftware.com

http://secunia.com/advisories/26503