NVD

CVE-2007-3387 Detail

Modified

This vulnerability has been modified since it was last analyzed by the NVD. It is awaiting reanalysis which may result in further changes to the information provided.

Description

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

Metrics

NVD enrichment efforts reference publicly available information to associate vector strings. CVSS information contributed by other sources is also displayed.

CVSS 4.0 Severity and Vector Strings:

NIST: NVD

N/A

NVD assessment not yet provided.

CVSS 3.x Severity and Vector Strings:

NIST: NVD

Base Score: N/A

NVD assessment not yet provided.

CVSS 2.0 Severity and Vector Strings:

National Institute of Standards and Technology

NIST: NVD

Base Score: 6.8 MEDIUM

Vector: (AV:N/AC:M/Au:N/C:P/I:P/A:P)

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Hyperlink	Resource
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch	Broken Link
ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch	Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc	Broken Link
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc	Broken Link
http://bugs.gentoo.org/show_bug.cgi?id=187139	Issue Tracking Third Party Advisory
http://bugs.gentoo.org/show_bug.cgi?id=187139	Issue Tracking Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194	Issue Tracking Third Party Advisory
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194	Issue Tracking Third Party Advisory
http://osvdb.org/40127	Broken Link
http://osvdb.org/40127	Broken Link
http://secunia.com/advisories/26188	Third Party Advisory
http://secunia.com/advisories/26188	Third Party Advisory
http://secunia.com/advisories/26251	Third Party Advisory
http://secunia.com/advisories/26251	Third Party Advisory
http://secunia.com/advisories/26254	Third Party Advisory
http://secunia.com/advisories/26254	Third Party Advisory
http://secunia.com/advisories/26255	Third Party Advisory
http://secunia.com/advisories/26255	Third Party Advisory
http://secunia.com/advisories/26257	Third Party Advisory
http://secunia.com/advisories/26257	Third Party Advisory
http://secunia.com/advisories/26278	Third Party Advisory
http://secunia.com/advisories/26278	Third Party Advisory
http://secunia.com/advisories/26281	Third Party Advisory
http://secunia.com/advisories/26281	Third Party Advisory
http://secunia.com/advisories/26283	Third Party Advisory
http://secunia.com/advisories/26283	Third Party Advisory
http://secunia.com/advisories/26292	Third Party Advisory
http://secunia.com/advisories/26292	Third Party Advisory
http://secunia.com/advisories/26293	Third Party Advisory
http://secunia.com/advisories/26293	Third Party Advisory
http://secunia.com/advisories/26297	Third Party Advisory
http://secunia.com/advisories/26297	Third Party Advisory
http://secunia.com/advisories/26307	Third Party Advisory
http://secunia.com/advisories/26307	Third Party Advisory
http://secunia.com/advisories/26318	Third Party Advisory
http://secunia.com/advisories/26318	Third Party Advisory
http://secunia.com/advisories/26325	Third Party Advisory
http://secunia.com/advisories/26325	Third Party Advisory
http://secunia.com/advisories/26342	Third Party Advisory
http://secunia.com/advisories/26342	Third Party Advisory
http://secunia.com/advisories/26343	Third Party Advisory
http://secunia.com/advisories/26343	Third Party Advisory
http://secunia.com/advisories/26358	Third Party Advisory
http://secunia.com/advisories/26358	Third Party Advisory
http://secunia.com/advisories/26365	Third Party Advisory
http://secunia.com/advisories/26365	Third Party Advisory
http://secunia.com/advisories/26370	Third Party Advisory
http://secunia.com/advisories/26370	Third Party Advisory
http://secunia.com/advisories/26395	Third Party Advisory
http://secunia.com/advisories/26395	Third Party Advisory
http://secunia.com/advisories/26403	Third Party Advisory
http://secunia.com/advisories/26403	Third Party Advisory
http://secunia.com/advisories/26405	Third Party Advisory
http://secunia.com/advisories/26405	Third Party Advisory
http://secunia.com/advisories/26407	Third Party Advisory
http://secunia.com/advisories/26407	Third Party Advisory
http://secunia.com/advisories/26410	Third Party Advisory
http://secunia.com/advisories/26410	Third Party Advisory
http://secunia.com/advisories/26413	Third Party Advisory
http://secunia.com/advisories/26413	Third Party Advisory
http://secunia.com/advisories/26425	Third Party Advisory
http://secunia.com/advisories/26425	Third Party Advisory
http://secunia.com/advisories/26432	Third Party Advisory
http://secunia.com/advisories/26432	Third Party Advisory
http://secunia.com/advisories/26436	Third Party Advisory
http://secunia.com/advisories/26436	Third Party Advisory
http://secunia.com/advisories/26467	Third Party Advisory
http://secunia.com/advisories/26467	Third Party Advisory
http://secunia.com/advisories/26468	Third Party Advisory
http://secunia.com/advisories/26468	Third Party Advisory
http://secunia.com/advisories/26470	Third Party Advisory
http://secunia.com/advisories/26470	Third Party Advisory
http://secunia.com/advisories/26514	Third Party Advisory
http://secunia.com/advisories/26514	Third Party Advisory
http://secunia.com/advisories/26607	Third Party Advisory
http://secunia.com/advisories/26607	Third Party Advisory
http://secunia.com/advisories/26627	Third Party Advisory
http://secunia.com/advisories/26627	Third Party Advisory
http://secunia.com/advisories/26862	Third Party Advisory
http://secunia.com/advisories/26862	Third Party Advisory
http://secunia.com/advisories/26982	Third Party Advisory
http://secunia.com/advisories/26982	Third Party Advisory
http://secunia.com/advisories/27156	Third Party Advisory
http://secunia.com/advisories/27156	Third Party Advisory
http://secunia.com/advisories/27281	Third Party Advisory
http://secunia.com/advisories/27281	Third Party Advisory
http://secunia.com/advisories/27308	Third Party Advisory
http://secunia.com/advisories/27308	Third Party Advisory
http://secunia.com/advisories/27637	Third Party Advisory
http://secunia.com/advisories/27637	Third Party Advisory
http://secunia.com/advisories/30168	Third Party Advisory
http://secunia.com/advisories/30168	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200709-12.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200709-12.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200709-17.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200709-17.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-20.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200710-20.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200711-34.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200711-34.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200805-13.xml	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200805-13.xml	Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882	Third Party Advisory
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882	Third Party Advisory
http://sourceforge.net/project/shownotes.php?release_id=535497	Broken Link
http://sourceforge.net/project/shownotes.php?release_id=535497	Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm	Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm	Third Party Advisory
http://www.debian.org/security/2007/dsa-1347	Third Party Advisory
http://www.debian.org/security/2007/dsa-1347	Third Party Advisory
http://www.debian.org/security/2007/dsa-1348	Third Party Advisory
http://www.debian.org/security/2007/dsa-1348	Third Party Advisory
http://www.debian.org/security/2007/dsa-1349	Third Party Advisory
http://www.debian.org/security/2007/dsa-1349	Third Party Advisory
http://www.debian.org/security/2007/dsa-1350	Third Party Advisory
http://www.debian.org/security/2007/dsa-1350	Third Party Advisory
http://www.debian.org/security/2007/dsa-1352	Third Party Advisory
http://www.debian.org/security/2007/dsa-1352	Third Party Advisory
http://www.debian.org/security/2007/dsa-1354	Third Party Advisory
http://www.debian.org/security/2007/dsa-1354	Third Party Advisory
http://www.debian.org/security/2007/dsa-1355	Third Party Advisory
http://www.debian.org/security/2007/dsa-1355	Third Party Advisory
http://www.debian.org/security/2007/dsa-1357	Third Party Advisory
http://www.debian.org/security/2007/dsa-1357	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml	Third Party Advisory
http://www.kde.org/info/security/advisory-20070730-1.txt	Third Party Advisory
http://www.kde.org/info/security/advisory-20070730-1.txt	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:158	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:158	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:159	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:159	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:160	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:160	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:161	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:161	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:162	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:162	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:163	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:163	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:164	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:165	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDKSA-2007:165	Third Party Advisory
http://www.novell.com/linux/security/advisories/2007_15_sr.html	Broken Link
http://www.novell.com/linux/security/advisories/2007_15_sr.html	Broken Link
http://www.novell.com/linux/security/advisories/2007_16_sr.html	Broken Link
http://www.novell.com/linux/security/advisories/2007_16_sr.html	Broken Link
http://www.redhat.com/support/errata/RHSA-2007-0720.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0720.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0729.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0729.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0730.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0730.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0731.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0731.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0732.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0732.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0735.html	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2007-0735.html	Third Party Advisory
http://www.securityfocus.com/archive/1/476508/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/476508/100/0/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/476519/30/5400/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/476519/30/5400/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/476765/30/5340/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/archive/1/476765/30/5340/threaded	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/25124	Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/25124	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018473	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018473	Third Party Advisory VDB Entry
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670	Third Party Advisory
http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670	Third Party Advisory
http://www.ubuntu.com/usn/usn-496-1	Third Party Advisory
http://www.ubuntu.com/usn/usn-496-1	Third Party Advisory
http://www.ubuntu.com/usn/usn-496-2	Third Party Advisory
http://www.ubuntu.com/usn/usn-496-2	Third Party Advisory
http://www.vupen.com/english/advisories/2007/2704	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2007/2704	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2007/2705	Permissions Required Third Party Advisory
http://www.vupen.com/english/advisories/2007/2705	Permissions Required Third Party Advisory
https://issues.foresightlinux.org/browse/FL-471	Broken Link
https://issues.foresightlinux.org/browse/FL-471	Broken Link
https://issues.rpath.com/browse/RPL-1596	Broken Link
https://issues.rpath.com/browse/RPL-1596	Broken Link
https://issues.rpath.com/browse/RPL-1604	Broken Link
https://issues.rpath.com/browse/RPL-1604	Broken Link
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149	Third Party Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149	Third Party Advisory

Weakness Enumeration

CWE-ID	CWE Name	Source
CWE-190	Integer Overflow or Wraparound	NIST

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Denotes Vulnerable Software
Are we missing a CPE here? Please let us know.

Change History

8 change records found show changes

CVE Modified by CVE 11/20/2024 7:33:06 PM

Action	Type	New Value
Added	Reference	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch
Added	Reference	ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc
Added	Reference	http://bugs.gentoo.org/show_bug.cgi?id=187139
Added	Reference	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194
Added	Reference	http://osvdb.org/40127
Added	Reference	http://secunia.com/advisories/26188
Added	Reference	http://secunia.com/advisories/26251
Added	Reference	http://secunia.com/advisories/26254
Added	Reference	http://secunia.com/advisories/26255
Added	Reference	http://secunia.com/advisories/26257
Added	Reference	http://secunia.com/advisories/26278
Added	Reference	http://secunia.com/advisories/26281
Added	Reference	http://secunia.com/advisories/26283
Added	Reference	http://secunia.com/advisories/26292
Added	Reference	http://secunia.com/advisories/26293
Added	Reference	http://secunia.com/advisories/26297
Added	Reference	http://secunia.com/advisories/26307
Added	Reference	http://secunia.com/advisories/26318
Added	Reference	http://secunia.com/advisories/26325
Added	Reference	http://secunia.com/advisories/26342
Added	Reference	http://secunia.com/advisories/26343
Added	Reference	http://secunia.com/advisories/26358
Added	Reference	http://secunia.com/advisories/26365
Added	Reference	http://secunia.com/advisories/26370
Added	Reference	http://secunia.com/advisories/26395
Added	Reference	http://secunia.com/advisories/26403
Added	Reference	http://secunia.com/advisories/26405
Added	Reference	http://secunia.com/advisories/26407
Added	Reference	http://secunia.com/advisories/26410
Added	Reference	http://secunia.com/advisories/26413
Added	Reference	http://secunia.com/advisories/26425
Added	Reference	http://secunia.com/advisories/26432
Added	Reference	http://secunia.com/advisories/26436
Added	Reference	http://secunia.com/advisories/26467
Added	Reference	http://secunia.com/advisories/26468
Added	Reference	http://secunia.com/advisories/26470
Added	Reference	http://secunia.com/advisories/26514
Added	Reference	http://secunia.com/advisories/26607
Added	Reference	http://secunia.com/advisories/26627
Added	Reference	http://secunia.com/advisories/26862
Added	Reference	http://secunia.com/advisories/26982
Added	Reference	http://secunia.com/advisories/27156
Added	Reference	http://secunia.com/advisories/27281
Added	Reference	http://secunia.com/advisories/27308
Added	Reference	http://secunia.com/advisories/27637
Added	Reference	http://secunia.com/advisories/30168
Added	Reference	http://security.gentoo.org/glsa/glsa-200709-12.xml
Added	Reference	http://security.gentoo.org/glsa/glsa-200709-17.xml
Added	Reference	http://security.gentoo.org/glsa/glsa-200710-20.xml
Added	Reference	http://security.gentoo.org/glsa/glsa-200711-34.xml
Added	Reference	http://security.gentoo.org/glsa/glsa-200805-13.xml
Added	Reference	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882
Added	Reference	http://sourceforge.net/project/shownotes.php?release_id=535497
Added	Reference	http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm
Added	Reference	http://www.debian.org/security/2007/dsa-1347
Added	Reference	http://www.debian.org/security/2007/dsa-1348
Added	Reference	http://www.debian.org/security/2007/dsa-1349
Added	Reference	http://www.debian.org/security/2007/dsa-1350
Added	Reference	http://www.debian.org/security/2007/dsa-1352
Added	Reference	http://www.debian.org/security/2007/dsa-1354
Added	Reference	http://www.debian.org/security/2007/dsa-1355
Added	Reference	http://www.debian.org/security/2007/dsa-1357
Added	Reference	http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml
Added	Reference	http://www.kde.org/info/security/advisory-20070730-1.txt
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:158
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:159
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:160
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:161
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:162
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:163
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:164
Added	Reference	http://www.mandriva.com/security/advisories?name=MDKSA-2007:165
Added	Reference	http://www.novell.com/linux/security/advisories/2007_15_sr.html
Added	Reference	http://www.novell.com/linux/security/advisories/2007_16_sr.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0720.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0729.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0730.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0731.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0732.html
Added	Reference	http://www.redhat.com/support/errata/RHSA-2007-0735.html
Added	Reference	http://www.securityfocus.com/archive/1/476508/100/0/threaded
Added	Reference	http://www.securityfocus.com/archive/1/476519/30/5400/threaded
Added	Reference	http://www.securityfocus.com/archive/1/476765/30/5340/threaded
Added	Reference	http://www.securityfocus.com/bid/25124
Added	Reference	http://www.securitytracker.com/id?1018473
Added	Reference	http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670
Added	Reference	http://www.ubuntu.com/usn/usn-496-1
Added	Reference	http://www.ubuntu.com/usn/usn-496-2
Added	Reference	http://www.vupen.com/english/advisories/2007/2704
Added	Reference	http://www.vupen.com/english/advisories/2007/2705
Added	Reference	https://issues.foresightlinux.org/browse/FL-471
Added	Reference	https://issues.rpath.com/browse/RPL-1596
Added	Reference	https://issues.rpath.com/browse/RPL-1604
Added	Reference	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149

CVE Modified by Red Hat, Inc. 2/12/2023 9:18:02 PM

Action	Type	Old Value	New Value
Changed	Description	CVE-2007-3387 xpdf integer overflow	Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0720 [No Types Assigned]
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0729 [No Types Assigned]
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0730 [No Types Assigned]
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0731 [No Types Assigned]
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0732 [No Types Assigned]
Removed	Reference	https://access.redhat.com/errata/RHSA-2007:0735 [No Types Assigned]
Removed	Reference	https://access.redhat.com/security/cve/CVE-2007-3387 [No Types Assigned]
Removed	Reference	https://bugzilla.redhat.com/show_bug.cgi?id=248194 [No Types Assigned]

CVE Modified by Red Hat, Inc. 2/02/2023 11:15:14 AM

Action	Type	Old Value	New Value
Changed	Description	Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.	CVE-2007-3387 xpdf integer overflow
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0720 [No Types Assigned]
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0729 [No Types Assigned]
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0730 [No Types Assigned]
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0731 [No Types Assigned]
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0732 [No Types Assigned]
Added	Reference		https://access.redhat.com/errata/RHSA-2007:0735 [No Types Assigned]
Added	Reference		https://access.redhat.com/security/cve/CVE-2007-3387 [No Types Assigned]
Added	Reference		https://bugzilla.redhat.com/show_bug.cgi?id=248194 [No Types Assigned]

Modified Analysis by NIST 12/23/2020 10:02:58 AM

Action	Type	Old Value	New Value
Added	CWE		NIST CWE-190
Removed	CWE	NIST CWE-189
Added	CPE Configuration		OR cpe:2.3:a:apple:cups::::::::* versions up to (including) 1.3.11 cpe:2.3:a:freedesktop:poppler::::::::* versions up to (excluding) 0.5.91 cpe:2.3:a:gpdf_project:gpdf::::::::* versions up to (excluding) 2.8.2 cpe:2.3:a:xpdfreader:xpdf:3.02:::::::
Added	CPE Configuration		OR cpe:2.3:o:canonical:ubuntu_linux:6.06::::::: cpe:2.3:o:canonical:ubuntu_linux:6.10::::::: cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::
Added	CPE Configuration		OR cpe:2.3:o:debian:debian_linux:3.1::::::: cpe:2.3:o:debian:debian_linux:4.0:::::::
Removed	CPE Configuration	Record truncated, showing 500 of 713 characters. View Entire Change Record AND OR cpe:2.3:o:redhat:enterprise_linux:4.0::as::::: cpe:2.3:o:redhat:enterprise_linux:4.0::es::::: cpe:2.3:o:redhat:enterprise_linux:4.0::ws::::: cpe:2.3:o:redhat:enterprise_linux_desktop:4.0:::::::* OR cpe:2.3:a:easy_software_products:cups::::::::* cpe:2.3:a:gnome:gpdf::::::::* versions up to (including) 2.8.1 cpe:2.3:a:kde:kdegraphics::::::::* *cpe:2.3:a:k
Changed	Reference Type	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch No Types Assigned	ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch Broken Link
Changed	Reference Type	ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc No Types Assigned	ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc Broken Link
Changed	Reference Type	http://bugs.gentoo.org/show_bug.cgi?id=187139 No Types Assigned	http://bugs.gentoo.org/show_bug.cgi?id=187139 Issue Tracking, Third Party Advisory
Changed	Reference Type	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194 No Types Assigned	http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194 Issue Tracking, Third Party Advisory
Changed	Reference Type	http://osvdb.org/40127 No Types Assigned	http://osvdb.org/40127 Broken Link
Changed	Reference Type	http://secunia.com/advisories/26188 Vendor Advisory	http://secunia.com/advisories/26188 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26251 No Types Assigned	http://secunia.com/advisories/26251 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26254 Vendor Advisory	http://secunia.com/advisories/26254 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26255 Vendor Advisory	http://secunia.com/advisories/26255 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26257 Vendor Advisory	http://secunia.com/advisories/26257 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26278 No Types Assigned	http://secunia.com/advisories/26278 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26281 No Types Assigned	http://secunia.com/advisories/26281 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26283 No Types Assigned	http://secunia.com/advisories/26283 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26292 No Types Assigned	http://secunia.com/advisories/26292 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26293 No Types Assigned	http://secunia.com/advisories/26293 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26297 No Types Assigned	http://secunia.com/advisories/26297 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26307 No Types Assigned	http://secunia.com/advisories/26307 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26318 No Types Assigned	http://secunia.com/advisories/26318 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26325 No Types Assigned	http://secunia.com/advisories/26325 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26342 No Types Assigned	http://secunia.com/advisories/26342 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26343 No Types Assigned	http://secunia.com/advisories/26343 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26358 No Types Assigned	http://secunia.com/advisories/26358 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26365 No Types Assigned	http://secunia.com/advisories/26365 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26370 No Types Assigned	http://secunia.com/advisories/26370 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26395 No Types Assigned	http://secunia.com/advisories/26395 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26403 No Types Assigned	http://secunia.com/advisories/26403 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26405 No Types Assigned	http://secunia.com/advisories/26405 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26407 No Types Assigned	http://secunia.com/advisories/26407 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26410 No Types Assigned	http://secunia.com/advisories/26410 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26413 No Types Assigned	http://secunia.com/advisories/26413 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26425 No Types Assigned	http://secunia.com/advisories/26425 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26432 No Types Assigned	http://secunia.com/advisories/26432 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26436 No Types Assigned	http://secunia.com/advisories/26436 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26467 No Types Assigned	http://secunia.com/advisories/26467 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26468 No Types Assigned	http://secunia.com/advisories/26468 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26470 No Types Assigned	http://secunia.com/advisories/26470 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26514 No Types Assigned	http://secunia.com/advisories/26514 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26607 No Types Assigned	http://secunia.com/advisories/26607 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26627 No Types Assigned	http://secunia.com/advisories/26627 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26862 No Types Assigned	http://secunia.com/advisories/26862 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/26982 No Types Assigned	http://secunia.com/advisories/26982 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/27156 No Types Assigned	http://secunia.com/advisories/27156 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/27281 No Types Assigned	http://secunia.com/advisories/27281 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/27308 No Types Assigned	http://secunia.com/advisories/27308 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/27637 No Types Assigned	http://secunia.com/advisories/27637 Third Party Advisory
Changed	Reference Type	http://secunia.com/advisories/30168 No Types Assigned	http://secunia.com/advisories/30168 Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200709-12.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200709-12.xml Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200709-17.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200709-17.xml Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200710-20.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200710-20.xml Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200711-34.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200711-34.xml Third Party Advisory
Changed	Reference Type	http://security.gentoo.org/glsa/glsa-200805-13.xml No Types Assigned	http://security.gentoo.org/glsa/glsa-200805-13.xml Third Party Advisory
Changed	Reference Type	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882 No Types Assigned	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882 Third Party Advisory
Changed	Reference Type	http://sourceforge.net/project/shownotes.php?release_id=535497 No Types Assigned	http://sourceforge.net/project/shownotes.php?release_id=535497 Broken Link
Changed	Reference Type	http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm No Types Assigned	http://support.avaya.com/elmodocs2/security/ASA-2007-401.htm Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1347 No Types Assigned	http://www.debian.org/security/2007/dsa-1347 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1348 No Types Assigned	http://www.debian.org/security/2007/dsa-1348 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1349 No Types Assigned	http://www.debian.org/security/2007/dsa-1349 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1350 No Types Assigned	http://www.debian.org/security/2007/dsa-1350 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1352 No Types Assigned	http://www.debian.org/security/2007/dsa-1352 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1354 No Types Assigned	http://www.debian.org/security/2007/dsa-1354 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1355 No Types Assigned	http://www.debian.org/security/2007/dsa-1355 Third Party Advisory
Changed	Reference Type	http://www.debian.org/security/2007/dsa-1357 No Types Assigned	http://www.debian.org/security/2007/dsa-1357 Third Party Advisory
Changed	Reference Type	http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml No Types Assigned	http://www.gentoo.org/security/en/glsa/glsa-200710-08.xml Third Party Advisory
Changed	Reference Type	http://www.kde.org/info/security/advisory-20070730-1.txt No Types Assigned	http://www.kde.org/info/security/advisory-20070730-1.txt Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:158 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:158 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:159 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:159 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:160 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:160 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:161 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:161 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:162 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:162 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:163 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:163 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:164 Third Party Advisory
Changed	Reference Type	http://www.mandriva.com/security/advisories?name=MDKSA-2007:165 No Types Assigned	http://www.mandriva.com/security/advisories?name=MDKSA-2007:165 Third Party Advisory
Changed	Reference Type	http://www.novell.com/linux/security/advisories/2007_15_sr.html No Types Assigned	http://www.novell.com/linux/security/advisories/2007_15_sr.html Broken Link
Changed	Reference Type	http://www.novell.com/linux/security/advisories/2007_16_sr.html No Types Assigned	http://www.novell.com/linux/security/advisories/2007_16_sr.html Broken Link
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0720.html Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0720.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0729.html Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0729.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0730.html Patch, Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0730.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0731.html Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0731.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0732.html Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0732.html Third Party Advisory
Changed	Reference Type	http://www.redhat.com/support/errata/RHSA-2007-0735.html Vendor Advisory	http://www.redhat.com/support/errata/RHSA-2007-0735.html Third Party Advisory
Changed	Reference Type	http://www.securityfocus.com/archive/1/476508/100/0/threaded No Types Assigned	http://www.securityfocus.com/archive/1/476508/100/0/threaded Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/archive/1/476519/30/5400/threaded No Types Assigned	http://www.securityfocus.com/archive/1/476519/30/5400/threaded Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/archive/1/476765/30/5340/threaded No Types Assigned	http://www.securityfocus.com/archive/1/476765/30/5340/threaded Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securityfocus.com/bid/25124 No Types Assigned	http://www.securityfocus.com/bid/25124 Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.securitytracker.com/id?1018473 No Types Assigned	http://www.securitytracker.com/id?1018473 Third Party Advisory, VDB Entry
Changed	Reference Type	http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670 No Types Assigned	http://www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670 Third Party Advisory
Changed	Reference Type	http://www.ubuntu.com/usn/usn-496-1 No Types Assigned	http://www.ubuntu.com/usn/usn-496-1 Third Party Advisory
Changed	Reference Type	http://www.ubuntu.com/usn/usn-496-2 No Types Assigned	http://www.ubuntu.com/usn/usn-496-2 Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2007/2704 No Types Assigned	http://www.vupen.com/english/advisories/2007/2704 Permissions Required, Third Party Advisory
Changed	Reference Type	http://www.vupen.com/english/advisories/2007/2705 No Types Assigned	http://www.vupen.com/english/advisories/2007/2705 Permissions Required, Third Party Advisory
Changed	Reference Type	https://issues.foresightlinux.org/browse/FL-471 No Types Assigned	https://issues.foresightlinux.org/browse/FL-471 Broken Link
Changed	Reference Type	https://issues.rpath.com/browse/RPL-1596 No Types Assigned	https://issues.rpath.com/browse/RPL-1596 Broken Link
Changed	Reference Type	https://issues.rpath.com/browse/RPL-1604 No Types Assigned	https://issues.rpath.com/browse/RPL-1604 Broken Link
Changed	Reference Type	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149 No Types Assigned	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149 Third Party Advisory

CVE Modified by Red Hat, Inc. 10/16/2018 12:48:57 PM

Action	Type	Old Value	New Value
Added	Reference		http://www.securityfocus.com/archive/1/476508/100/0/threaded [No Types Assigned]
Added	Reference		http://www.securityfocus.com/archive/1/476519/30/5400/threaded [No Types Assigned]
Added	Reference		http://www.securityfocus.com/archive/1/476765/30/5340/threaded [No Types Assigned]
Removed	Reference	http://www.securityfocus.com/archive/1/archive/1/476508/100/0/threaded [No Types Assigned]
Removed	Reference	http://www.securityfocus.com/archive/1/archive/1/476519/30/5400/threaded [No Types Assigned]
Removed	Reference	http://www.securityfocus.com/archive/1/archive/1/476765/30/5340/threaded [No Types Assigned]

Quick Info

CVE Dictionary Entry:
CVE-2007-3387
NVD Published Date:
07/30/2007
NVD Last Modified:
11/20/2024
Source:
Red Hat, Inc.

You are viewing this page in an unauthorized frame window.

Information Technology Laboratory

National Vulnerability Database

National Vulnerability Database

CVE-2007-3387 Detail

Description

Metrics

References to Advisories, Solutions, and Tools

Weakness Enumeration

Known Affected Software Configurations Switch to CPE 2.2

CPEs loading, please wait.

Change History

CVE Modified by CVE 11/20/2024 7:33:06 PM

CVE Modified by Red Hat, Inc. 5/13/2024 9:46:10 PM

CVE Modified by Red Hat, Inc. 2/12/2023 9:18:02 PM

CVE Modified by Red Hat, Inc. 2/02/2023 11:15:14 AM

Modified Analysis by NIST 12/23/2020 10:02:58 AM

CVE Modified by Red Hat, Inc. 10/16/2018 12:48:57 PM

CVE Modified by Red Hat, Inc. 10/10/2017 9:32:46 PM

Initial CVE Analysis 7/31/2007 5:31:00 PM

Quick Info