CVE-2007-5393
Fixed in a distro release EPSS 6%
Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
Products: xpdf
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | cups | 1.1.22-7 |
| Debian 12 | libextractor | 0.5.12-1 |
| Debian 12 | poppler | 0.6.2-1 |
| Debian 12 | xpdf | 3.02-1.3 |
| Debian 13 | cups | 1.1.22-7 |
| Debian 13 | libextractor | 0.5.12-1 |
| Debian 13 | poppler | 0.6.2-1 |
| Debian 13 | xpdf | 3.02-1.3 |
| Debian 14 | cups | 1.1.22-7 |
| Debian 14 | libextractor | 0.5.12-1 |
| Debian 14 | poppler | 0.6.2-1 |
| Debian 14 | xpdf | 3.02-1.3 |
| Debian 4.0 | kdegraphics | 4:3.5.5-3etch2 |
| Debian 4.0 | koffice | 1:1.6.1-2etch2 |
| Debian 4.0 | poppler | 0.4.5-5.1etch2 |
| Debian 4.0 | xpdf | 3.01-9.1+etch2 |
| Debian 5.0 | kdegraphics | 4:3.5.7-4+lenny1 |
| Debian 5.0 | koffice | 1:1.6.3-3+lenny1 |
| Red Hat Enterprise Linux 2.1 | tetex | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-afm | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-doc | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-dvilj | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-dvips | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-fonts | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-latex | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | tetex-xdvi | 0:1.0.7-38.5E.12 |
| Red Hat Enterprise Linux 2.1 | xpdf | 1:0.92-19.el2 |
| Red Hat Enterprise Linux 3 | cups | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-debuginfo | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-devel | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | cups-libs | 1:1.1.17-13.3.46 |
| Red Hat Enterprise Linux 3 | tetex | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-afm | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-debuginfo | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-dvips | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-fonts | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-latex | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | tetex-xdvi | 0:1.0.7-67.11 |
| Red Hat Enterprise Linux 3 | xpdf | 1:2.02-11.el3 |
| Red Hat Enterprise Linux 3 | xpdf-debuginfo | 1:2.02-11.el3 |
| Red Hat Enterprise Linux 4 | cups | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-debuginfo | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-devel | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | cups-libs | 1:1.1.22-0.rc1.9.20.2.el4_5.2 |
| Red Hat Enterprise Linux 4 | gpdf | 0:2.8.2-7.7.1 |
| Red Hat Enterprise Linux 4 | gpdf-debuginfo | 0:2.8.2-7.7.1 |
| Red Hat Enterprise Linux 4 | kdegraphics | 7:3.3.1-6.el4_5 |
| Red Hat Enterprise Linux 4 | kdegraphics-debuginfo | 7:3.3.1-6.el4_5 |
| Red Hat Enterprise Linux 4 | kdegraphics-devel | 7:3.3.1-6.el4_5 |
| Red Hat Enterprise Linux 4 | tetex | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-afm | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-debuginfo | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-doc | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-dvips | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-fonts | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-latex | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | tetex-xdvi | 0:2.0.2-22.0.1.EL4.10 |
| Red Hat Enterprise Linux 4 | xpdf | 1:3.00-14.el4 |
| Red Hat Enterprise Linux 4 | xpdf-debuginfo | 1:3.00-14.el4 |
| Red Hat Enterprise Linux 5 | cups | 1:1.2.4-11.14.el5_1.3 |
| Red Hat Enterprise Linux 5 | cups-debuginfo | 1:1.2.4-11.14.el5_1.3 |
| Red Hat Enterprise Linux 5 | cups-devel | 1:1.2.4-11.14.el5_1.3 |
| Red Hat Enterprise Linux 5 | cups-libs | 1:1.2.4-11.14.el5_1.3 |
| Red Hat Enterprise Linux 5 | cups-lpd | 1:1.2.4-11.14.el5_1.3 |
| Red Hat Enterprise Linux 5 | kdegraphics | 7:3.5.4-5.el5_1 |
| Red Hat Enterprise Linux 5 | kdegraphics-debuginfo | 7:3.5.4-5.el5_1 |
| Red Hat Enterprise Linux 5 | kdegraphics-devel | 7:3.5.4-5.el5_1 |
| Red Hat Enterprise Linux 5 | poppler | 0:0.5.4-4.3.el5_1 |
| Red Hat Enterprise Linux 5 | poppler-debuginfo | 0:0.5.4-4.3.el5_1 |
| Red Hat Enterprise Linux 5 | poppler-devel | 0:0.5.4-4.3.el5_1 |
| Red Hat Enterprise Linux 5 | poppler-utils | 0:0.5.4-4.3.el5_1 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.2.el5_1.2 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.2.el5_1.2 |
| Red Hat rhel productivity 5 | kdegraphics | 7:3.5.4-5.el5_1 |
| Red Hat rhel productivity 5 | kdegraphics-debuginfo | 7:3.5.4-5.el5_1 |
| Red Hat rhel productivity 5 | kdegraphics-devel | 7:3.5.4-5.el5_1 |
| openSUSE Tumbleweed | cups | 2.3.3op2-4.2 |
| openSUSE Tumbleweed | poppler | 21.08.0-1.3 |