CVE-2007-4352 - Secunia

Blog

Careers

Secunia SmallBusiness

Products

Solutions

Customers

Partner

Resources

Company

Careers

Community

CVE Reference: CVE-2007-4352
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4352

Description: Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/38306 UBUNTU http://www.ubuntu.com/usn/usn-542-2 http://www.ubuntu.com/usn/usn-542-1 SUSE http://www.novell.com/linux/security/advisories/2007_60_pdf.html ST 1018905 SLACKWARE http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882 SAID Secunia Advisory: SA30168 Secunia Advisory: SA29604 Secunia Advisory: SA29104 Secunia Advisory: SA28812 Secunia Advisory: SA28043 Secunia Advisory: SA27856 Secunia Advisory: SA27743 Secunia Advisory: SA27724 Secunia Advisory: SA27721 Secunia Advisory: SA27705 Secunia Advisory: SA27658 Secunia Advisory: SA27634 Secunia Advisory: SA27636 Secunia Advisory: SA27645 Secunia Advisory: SA27632 Secunia Advisory: SA27656 Secunia Advisory: SA27642 Secunia Advisory: SA27641 Secunia Advisory: SA27640 Secunia Advisory: SA27619 Secunia Advisory: SA27618 Secunia Advisory: SA26503 Secunia Advisory: SA27599 Secunia Advisory: SA27637 Secunia Advisory: SA27615 Secunia Advisory: SA27578 Secunia Advisory: SA27577 Secunia Advisory: SA27575 Secunia Advisory: SA27574 Secunia Advisory: SA27553 Secunia Advisory: SA27573 Secunia Advisory: SA27260 REDHAT http://www.redhat.com/support/errata/RHSA-2007-1024.html http://www.redhat.com/support/errata/RHSA-2007-1030.html http://www.redhat.com/support/errata/RHSA-2007-1029.html http://www.redhat.com/support/errata/RHSA-2007-1027.html http://www.redhat.com/support/errata/RHSA-2007-1026.html http://www.redhat.com/support/errata/RHSA-2007-1025.html http://www.redhat.com/support/errata/RHSA-2007-1022.html http://www.redhat.com/support/errata/RHSA-2007-1021.html OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9979 MISC http://secunia.com/secunia_research/2007-88/advisory/ MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:222 http://www.mandriva.com/security/advisories?name=MDKSA-2007:223 http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 http://www.mandriva.com/security/advisories?name=MDKSA-2007:228 http://www.mandriva.com/security/advisories?name=MDKSA-2007:227 http://www.mandriva.com/security/advisories?name=MDKSA-2007:221 http://www.mandriva.com/security/advisories?name=MDKSA-2007:220 http://www.mandriva.com/security/advisories?name=MDKSA-2007:219 GENTOO http://security.gentoo.org/glsa/glsa-200805-13.xml http://security.gentoo.org/glsa/glsa-200711-22.xml http://security.gentoo.org/glsa/glsa-200711-34.xml FEDORA DEBIAN http://www.debian.org/security/2008/dsa-1537 http://www.debian.org/security/2008/dsa-1480 http://www.debian.org/security/2008/dsa-1509 CONFIRM http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html http://www.kde.org/info/security/advisory-20071107-1.txt http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html BUGTRAQ http://www.securityfocus.com/archive/1/483372 BID 26367

Return to the previous page.

Products

Solutions

Customers

Partner

Resources

Company

Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)

Industry
Compliance
Technology
Integration

Customers
Testimonials

VARS
MSSP
Technology Partners
References

Factsheets
Reports
Webinars
Events

About us
Careers
Memberships
Newsroom

© 2002-2013 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability