Back

MEDIUM

xpdf integer overflow

Published Jul 30, 2007

Description

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

Affected products

Remediation

No remediation recorded yet.

Metrics

References (98)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner redhat
Published Jul 30, 2007
Updated Aug 7, 2024
Reserved Jun 25, 2007
NVD
Status Modified
Modified Jun 16, 2026
Red Hat
Severity Important
Public date Jul 28, 2007