CVE-2007-4352

HIGH 7.6CVE-2007-4352 · Published 08/11/2007 · updated 16/06/2026

In short

CVE-2007-4352 is a HIGH (CVSS 7.6) vulnerability affecting xpdf (xpdf).
Chance of exploitation in the next 30 days (EPSS): 7.0%, higher than 94.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xpdf xpdf	`= 3.0.1_pl1`	No fix yet

Description

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.

References

secunia.com/advisories/26503
secunia.com/advisories/27260 · Patch
secunia.com/advisories/27553
secunia.com/advisories/27573
secunia.com/advisories/27574
secunia.com/advisories/27575
secunia.com/advisories/27577
secunia.com/advisories/27578
secunia.com/advisories/27599
secunia.com/advisories/27615
secunia.com/advisories/27618
secunia.com/advisories/27619
secunia.com/advisories/27632
secunia.com/advisories/27634
secunia.com/advisories/27636
secunia.com/advisories/27637
secunia.com/advisories/27640
secunia.com/advisories/27641

More vulnerabilities in xpdf

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free