Home > Vulnerability Database > CVE-2007-0104

Mend.io Vulnerability Database

CVE-2007-0104

Date: January 8, 2007

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.

Severity Score

5.6

Related Resources (37)

Url: http://secunia.com/advisories/23839

Url: https://issues.rpath.com/browse/RPL-964

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-0104

Url: http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html

Url: http://www.vupen.com/english/advisories/2007/0212

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-0104

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:018

Url: http://secunia.com/advisories/24204

Url: http://secunia.com/advisories/23799

Url: http://www.securitytracker.com/id?1017749

Url: http://www.vupen.com/english/advisories/2007/0203

Url: http://secunia.com/advisories/23876

Url: http://secunia.com/advisories/23813

Url: http://www.us-cert.gov/cas/techalerts/TA07-072A.html

Url: http://secunia.com/advisories/23815

Url: http://www.kde.org/info/security/advisory-20070115-1.txt

Url: http://www.novell.com/linux/security/advisories/2007_3_sr.html

Url: http://secunia.com/advisories/23791

Url: http://projects.info-pull.com/moab/MOAB-06-01-2007.html

Url: http://www.securityfocus.com/archive/1/457055/100/0/threaded

Url: http://www.ubuntu.com/usn/usn-410-1

Url: http://secunia.com/advisories/23808

Url: http://docs.info.apple.com/article.html?artnum=305214

Url: http://www.vupen.com/english/advisories/2007/0244

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:019

Url: http://www.securityfocus.com/bid/21910

Url: http://securitytracker.com/id?1017514

Url: http://www.vupen.com/english/advisories/2007/0930

Url: http://secunia.com/advisories/23844

Url: http://secunia.com/advisories/24479

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:024

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/31364

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:022

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:020

Url: http://www.mandriva.com/security/advisories?name=MDKSA-2007:021

Url: http://www.ubuntu.com/usn/usn-410-2

Url: https://www.mend.io/vulnerability-database/CVE-2007-0104

Severity Score

5.6

Weakness Type (CWE)

Input Validation

CWE-20

CVSS v3.1

Base Score:	5.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	HIGH
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	LOW

CVSS v2

Base Score:	6.8
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	PARTIAL
Additional information:

Mend.io Vulnerability Database

We found results for “”

CVE-2007-0104

Date: January 8, 2007

Severity Score

Related Resources (37)

Severity Score

Weakness Type (CWE)

CVSS v3.1

CVSS v2

Do you need more information?