What is CVE-2007-5392?

CVE-2007-5392 is a vulnerability in Xpdf, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-11-08.

Is CVE-2007-5392 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Xpdf

CVE-2007-5392

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

Vulnerability class: Buffer Overflow

EPSS: 0.064 (93.0th percentile) — read the EPSS interpretation.

Affected products

Xpdf — versions 3.0.1_pl1
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_SUSE)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)
PSIRT-CNA@flexerasoftware.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)

Frequently asked questions

What is CVE-2007-5392?: CVE-2007-5392 is a vulnerability in Xpdf, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-11-08.
Is CVE-2007-5392 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.