CVE-2007-3387 · threatengine.sh

Home/CVE/Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2

CVE

CVE-2007-3387

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

MEDIUM · CVSS 6.8 EPSS 0.10704

Schedule remediation

EPSS ≥ 0.10 - elevated exploitation probability
EPSS percentile: top 7% of all CVEs by exploitation likelihood

Sigma rules0 YARA rules0

⬡

Weakness Classification

CWE-190Integer Overflow or Wraparound

▤

Affected Products & Versions

6

apple cups<= 1.3.11
freedesktop poppler< 0.5.91
gpdf project gpdf< 2.8.2
xpdfreader xpdfall versions
debian linuxall versions
canonical ubuntu linuxall versions

▣

Scoring & Timeline

6.8

MEDIUM · CVSS v2 (legacy) · secalert@redhat.com

View on NVD

This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.

v2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Published to NVD30 Jul 2007 · 11:17 PM

⚑

Vendor Advisories

9

suse-csafopenSUSE-SU-2024:10707-1
usnUSN-496-2
usnUSN-496-1
rhsaRHSA-2007:0729Important
rhsaRHSA-2007:0730Important
Show all 9 vendor advisoriesrhsaRHSA-2007:0732Important
rhsaRHSA-2007:0731Important
rhsaRHSA-2007:0720Important
rhsaRHSA-2007:0735Important

🔗

References & Sources

80

Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patchBroken Link

ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.ascBroken Link

http://bugs.gentoo.org/show_bug.cgi?id=187139Issue TrackingThird Party Advisory

http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194Issue TrackingThird Party Advisory

http://osvdb.org/40127Broken Link

http://secunia.com/advisories/26188Third Party Advisory

Show all 80 references

http://secunia.com/advisories/26251Third Party Advisory

http://secunia.com/advisories/26254Third Party Advisory

http://secunia.com/advisories/26255Third Party Advisory

http://secunia.com/advisories/26257Third Party Advisory

http://secunia.com/advisories/26278Third Party Advisory

http://secunia.com/advisories/26281Third Party Advisory

http://secunia.com/advisories/26283Third Party Advisory

http://secunia.com/advisories/26292Third Party Advisory

http://secunia.com/advisories/26293Third Party Advisory

http://secunia.com/advisories/26297Third Party Advisory

http://secunia.com/advisories/26307Third Party Advisory

http://secunia.com/advisories/26318Third Party Advisory

http://secunia.com/advisories/26325Third Party Advisory

http://secunia.com/advisories/26342Third Party Advisory

http://secunia.com/advisories/26343Third Party Advisory

http://secunia.com/advisories/26358Third Party Advisory

http://secunia.com/advisories/26365Third Party Advisory

http://secunia.com/advisories/26370Third Party Advisory

http://secunia.com/advisories/26395Third Party Advisory

http://secunia.com/advisories/26403Third Party Advisory

http://secunia.com/advisories/26405Third Party Advisory

http://secunia.com/advisories/26407Third Party Advisory

http://secunia.com/advisories/26410Third Party Advisory

http://secunia.com/advisories/26413Third Party Advisory

http://secunia.com/advisories/26425Third Party Advisory

http://secunia.com/advisories/26432Third Party Advisory

http://secunia.com/advisories/26436Third Party Advisory

http://secunia.com/advisories/26467Third Party Advisory

http://secunia.com/advisories/26468Third Party Advisory

http://secunia.com/advisories/26470Third Party Advisory

http://secunia.com/advisories/26514Third Party Advisory

http://secunia.com/advisories/26607Third Party Advisory

http://secunia.com/advisories/26627Third Party Advisory

http://secunia.com/advisories/26862Third Party Advisory

http://secunia.com/advisories/26982Third Party Advisory

http://secunia.com/advisories/27156Third Party Advisory

http://secunia.com/advisories/27281Third Party Advisory

http://secunia.com/advisories/27308Third Party Advisory

http://secunia.com/advisories/27637Third Party Advisory

http://secunia.com/advisories/30168Third Party Advisory

http://security.gentoo.org/glsa/glsa-200709-12.xmlThird Party Advisory

http://security.gentoo.org/glsa/glsa-200709-17.xmlThird Party Advisory

http://security.gentoo.org/glsa/glsa-200710-20.xmlThird Party Advisory

http://security.gentoo.org/glsa/glsa-200711-34.xmlThird Party Advisory

http://security.gentoo.org/glsa/glsa-200805-13.xmlThird Party Advisory

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882Third Party Advisory

http://sourceforge.net/project/shownotes.php?release_id=535497Broken Link

http://support.avaya.com/elmodocs2/security/ASA-2007-401.htmThird Party Advisory

http://www.debian.org/security/2007/dsa-1347Third Party Advisory

http://www.debian.org/security/2007/dsa-1348Third Party Advisory

http://www.debian.org/security/2007/dsa-1349Third Party Advisory

http://www.debian.org/security/2007/dsa-1350Third Party Advisory

http://www.debian.org/security/2007/dsa-1352Third Party Advisory

http://www.debian.org/security/2007/dsa-1354Third Party Advisory

http://www.debian.org/security/2007/dsa-1355Third Party Advisory

http://www.debian.org/security/2007/dsa-1357Third Party Advisory

http://www.gentoo.org/security/en/glsa/glsa-200710-08.xmlThird Party Advisory

http://www.kde.org/info/security/advisory-20070730-1.txtThird Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:158Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:159Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:160Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:161Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:162Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:163Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:164Third Party Advisory

http://www.mandriva.com/security/advisories?name=MDKSA-2007:165Third Party Advisory

http://www.novell.com/linux/security/advisories/2007_15_sr.htmlBroken Link

http://www.novell.com/linux/security/advisories/2007_16_sr.htmlBroken Link

http://www.redhat.com/support/errata/RHSA-2007-0720.htmlThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0729.htmlThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0730.htmlThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0731.htmlThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0732.htmlThird Party Advisory

http://www.redhat.com/support/errata/RHSA-2007-0735.htmlThird Party Advisory

Intelligence Graph · click any node to traverse

CVETechnique ActorTool Family

drag to reposition · click any node to traverse · button top-right enlarges

External lookups - second-class, for what we don’t hold ourselves

NVD CVE.org CISA Vulners Exploit-DB GitHub PoC VulnCheck KEV GreyNoise

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin