What is CVE-2007-5393?

CVE-2007-5393 is a vulnerability in Xpdf, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-11-08.

Is CVE-2007-5393 known to be exploited?

2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Xpdf

CVE-2007-5393

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.

Vulnerability class: Buffer Overflow

EPSS: 0.064 (93.0th percentile) — read the EPSS interpretation.

Affected products

Xpdf — versions 3.02p11
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

References

PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_SUSE)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (vendor-advisory, x_refsource_MANDRIVA)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_VUPEN)
PSIRT-CNA@flexerasoftware.com (vdb-entry, x_refsource_XF)
PSIRT-CNA@flexerasoftware.com (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_SECUNIA, third-party-advisory)
PSIRT-CNA@flexerasoftware.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2007-5393?: CVE-2007-5393 is a vulnerability in Xpdf, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2007-11-08.
Is CVE-2007-5393 known to be exploited?: 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.