PT-2007-1589 · Kde · Kpdf

Publicado 2007-01-09 · Atualizado 2024-06-15 · CVE-2007-0104

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions xpdf versions 3.0.1 patch 2 kpdf in KDE versions prior to 3.5.5 poppler versions prior to 0.5.4

Description The issue allows remote attackers to have an unknown impact, possibly including denial of service, arbitrary code execution, or memory corruption, via a PDF file with a crafted catalog dictionary or a crafted Pages attribute that references an invalid page tree node.

Recommendations For xpdf version 3.0.1 patch 2, update to a version later than 3.0.1 patch 2. For kpdf in KDE versions prior to 3.5.5, update to version 3.5.5 or later. For poppler versions prior to 0.5.4, update to version 0.5.4 or later.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0104

OPENSUSE-SU-2024:10707-1

OPENSUSE-SU-2024:11181-1

Produtos afetados

Kpdf

Referências · 66

• 🔥 http://securityfocus.com/bid/21910 · Exploit
• http://securityfocus.com/archive/1/457055/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 · Nota
• http://secunia.com/advisories/23815 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2007:018 · Aviso do Fabricante
• https://osv.dev/vulnerability/openSUSE-SU-2024:11181-1 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2021-25317 · Nota
• http://securitytracker.com/id?1017514 · Nota
• http://docs.info.apple.com/article.html?artnum=305214 · Nota
• https://suse.com/security/cve/CVE-2008-2950 · Nota
• https://suse.com/security/cve/CVE-2007-0104 · Nota
• https://suse.com/security/cve/CVE-2007-5393 · Nota
• https://suse.com/security/cve/CVE-2007-4352 · Nota
• http://kde.org/info/security/advisory-20070115-1.txt · Nota
• https://suse.com/security/cve/CVE-2007-5392 · Nota