CVE-2007-3387

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4)…

published July 30, 2007

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08565 · 95.1th percentile
Published
2007-07-30T23:00Z
EPSS history
Timeline
  • 30 JUL 23:00Z
    Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4)…
    cvelistv5