Unscored severity · published Jan 9, 2007
CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to…
–
CVSS
6.2%
EPSS
No
On KEV
Description
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KD
Kde · Kde
3.2; 3.2.1; 3.2.2; 3.2.3; 3.3; 3.3.1; +6 more · source: NVD
XP
Xpdf · Xpdf
3.0; 3.0.1; 3.0.1_pl1; 3.0.1_pl2; 3.0_pl2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0104
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0104
docs.info.apple.com
http://docs.info.apple.com/article.html?artnum=305214
projects.info-pull.com
http://projects.info-pull.com/moab/MOAB-06-01-2007.html
secunia.com
http://secunia.com/advisories/23791
Vendor Advisory
http://secunia.com/advisories/23799
Vendor Advisory
http://secunia.com/advisories/23808
Vendor Advisory
http://secunia.com/advisories/23813
More from Kde
8.8
CVE-2012-4512
The CSS parser (khtml/css/cssparser.cpp) in Konqueror in KDE 4.7.3 allows remote attackers to cause a denial of service (crash) and possibly read memory via a crafted font face…
7.5
CVE-2005-1920
The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could…
7.1
CVE-2004-0689
KDE before 3.3.0 does not properly handle when certain symbolic links point to "stale" locations, which could allow local users to create or truncate arbitrary files
–
CVE-2012-4515
Use-after-free vulnerability in khtml/rendering/render_replaced.cpp in Konqueror in KDE 4.7.3, when the context menu is shown, allows remote attackers to cause a denial of service…
–
CVE-2012-4514
rendering/render_replaced.cpp in Konqueror in KDE before 4.9.3 allows remote attackers to cause a denial of service (NULL pointer dereference) via a crafted web page, related to…