CVE-2007-0104

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows…

published January 9, 2007

CVSS
—
EPSS
6%
Percentile
93.5
In the wild
Unconfirmed
What it is

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06229 · 93.5th percentile
Published
2007-01-09T00:00Z
EPSS history
Timeline
  • 09 JAN 00:00Z
    The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows…
    cvelistv5