p PatchFirst

CVE-2007-3387

CVE-2007-3387

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

EPSS 8.6% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • libextractor Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.5.12-1

    Update to 0.5.12-1

  • libextractor Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.5.12-1

    Update to 0.5.12-1

  • libextractor Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.5.12-1

    Update to 0.5.12-1

  • poppler Debian:12

    Affected ranges
    • ECOSYSTEM: < 0.5.4-6.1

    Update to 0.5.4-6.1

  • poppler Debian:13

    Affected ranges
    • ECOSYSTEM: < 0.5.4-6.1

    Update to 0.5.4-6.1

  • poppler Debian:14

    Affected ranges
    • ECOSYSTEM: < 0.5.4-6.1

    Update to 0.5.4-6.1

  • xpdf Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.02-1.1

    Update to 3.02-1.1

  • xpdf Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.02-1.1

    Update to 3.02-1.1

  • xpdf Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.02-1.1

    Update to 3.02-1.1

Original sources

Check your server →