Multiple PDF Readers Multiple Remote Buffer Overflow Vulnerability

BID:21910

Info

Multiple PDF Readers Multiple Remote Buffer Overflow Vulnerability

Bugtraq ID: 21910
Class: Boundary Condition Error
CVE: CVE-2007-0103
CVE-2007-0104
Remote: Yes
Local: No
Published: Jan 06 2007 12:00AM
Updated: Jul 06 2016 02:40PM
Credit: LMH is credited with the discovery of these vulnerabilities.
Vulnerable: Xpdf Xpdf 3.0 pl2
Xpdf Xpdf 3.0 1pl1
Xpdf Xpdf 3.0 1
Xpdf Xpdf 3.0 0
Xpdf Xpdf 3.0.1 (Patch 2)
Ubuntu Ubuntu Linux 5.10 sparc
Ubuntu Ubuntu Linux 5.10 powerpc
Ubuntu Ubuntu Linux 5.10 i386
Ubuntu Ubuntu Linux 5.10 amd64
Ubuntu Ubuntu Linux 6.10 sparc
Ubuntu Ubuntu Linux 6.10 powerpc
Ubuntu Ubuntu Linux 6.10 i386
Ubuntu Ubuntu Linux 6.10 amd64
Ubuntu Ubuntu Linux 6.06 LTS sparc
Ubuntu Ubuntu Linux 6.06 LTS powerpc
Ubuntu Ubuntu Linux 6.06 LTS i386
Ubuntu Ubuntu Linux 6.06 LTS amd64
Turbolinux Turbolinux Server 10.0
Turbolinux Turbolinux Server 8.0
Turbolinux Turbolinux Server 10.0.0 x64
Turbolinux Turbolinux Desktop 10.0
Turbolinux Turbolinux FUJI
Turbolinux Turbolinux 10 F...
TurboLinux Personal
TurboLinux Multimedia
Turbolinux Home
teTeX teTeX 3.0
teTeX teTeX 2.0.2
teTeX teTeX 2.0.1
teTeX teTeX 2.0
SuSE SUSE Linux Enterprise Server 9
SuSE SUSE Linux Enterprise Server 10
SuSE Linux 9.3
SuSE Linux 9.2
SuSE Linux 9.1
S.u.S.E. Linux 10.1
S.u.S.E. Linux 10.0
rPath rPath Linux 1
Poppler poppler 0.5.4
Poppler poppler 0.5.3
Poppler poppler 0.5.1
Poppler poppler 0.4.2
Poppler poppler 0.4.1
PDFTOHTML PDFTOHTML 0.36
PDFTOHTML PDFTOHTML 0.35
PDFTOHTML PDFTOHTML 0.34
PDFTOHTML PDFTOHTML 0.33 a
PDFTOHTML PDFTOHTML 0.33
PDFTOHTML PDFTOHTML 0.32 b
PDFTOHTML PDFTOHTML 0.32 a
Mandriva Linux Mandrake 2006.0 x86_64
Mandriva Linux Mandrake 2006.0
Mandriva Linux Mandrake 2007.0 x86_64
Mandriva Linux Mandrake 2007.0
MandrakeSoft Corporate Server 4.0 x86_64
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 4.0
KDE kword 1.5.2
KDE kword 1.5
KDE kword 1.4.2
KDE kword 1.4.1
KDE kpdf 3.4.3
KDE kpdf 3.4.2
KDE kpdf 3.2
KDE kpdf 0.5
KDE KOffice 1.6.1
KDE KOffice 1.6
KDE KOffice 1.5.91
KDE KOffice 1.5.2
KDE KOffice 1.5
KDE KOffice 1.4.2
KDE KOffice 1.4.1
KDE KOffice 1.4
KDE KOffice 1.3.5
KDE KOffice 1.3.4
KDE KOffice 1.3.3
+ Mandriva Linux Mandrake 10.1 x86_64
 + Mandriva Linux Mandrake 10.1
KDE KOffice 1.3.2
KDE KOffice 1.3.1
KDE KOffice 1.3 beta3
KDE KOffice 1.3 beta2
KDE KOffice 1.3 beta1
KDE KOffice 1.3
+ Mandriva Linux Mandrake 10.0 AMD64
 + Mandriva Linux Mandrake 10.0
KDE KOffice 1.2.92
KDE KOffice 1.2.1
KDE KOffice 1.2
KDE KDE 3.5.5
KDE KDE 3.5.4
KDE KDE 3.5.3
KDE KDE 3.5.2
KDE KDE 3.5.1
KDE KDE 3.5
KDE KDE 3.4.3
KDE KDE 3.4.2
KDE KDE 3.4.1
KDE KDE 3.4
KDE KDE 3.3.2
KDE KDE 3.3.1
+ Red Hat Fedora Core3
 KDE KDE 3.3
KDE KDE 3.2.3
KDE KDE 3.2.2
+ KDE KDE 3.2.2
+ Red Hat Fedora Core2
 KDE KDE 3.2.1
KDE KDE 3.2
Apple Mac OS X Preview.app 3.0.8
Adobe Reader 7.0.8
Adobe Reader 7.0.7
Adobe Reader 7.0.6
Adobe Reader 7.0.5
Adobe Reader 7.0.4
Adobe Reader 7.0.3
Adobe Reader 7.0.2
Adobe Reader 7.0.1
Adobe Reader 7.0
Adobe Reader 6.0.4
Adobe Reader 6.0.3
Adobe Reader 6.0.2
Adobe Reader 6.0.1
Adobe Reader 6.0
Adobe Reader 5.1
Adobe Reader 5.0.10
Adobe Reader 5.0.5
Adobe Reader 5.0
Adobe Reader 4.0.5 A
Adobe Reader 4.0 5c
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
 Adobe Reader 4.0 5
Adobe Reader 4.0
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
 Adobe Reader 3.0
- Microsoft Windows 95
- Microsoft Windows 98
- Microsoft Windows NT 4.0
 Adobe Acrobat Reader (UNIX) 7.0.1
Adobe Acrobat Reader (UNIX) 7.0
Adobe Acrobat Reader (UNIX) 5.0.11
Adobe Acrobat Reader (UNIX) 5.0.10
+ Gentoo Linux
Adobe Acrobat Reader (UNIX) 5.0.9
Adobe Acrobat Reader (UNIX) 5.0.8
+ Gentoo Linux
+ S.u.S.E. Linux 8.1
+ S.u.S.E. Linux 8.0 i386
 + S.u.S.E. Linux 8.0
+ S.u.S.E. Linux Connectivity Server
+ S.u.S.E. Linux Database Server 0
 + S.u.S.E. Linux Desktop 1.0
+ S.u.S.E. Linux Enterprise Server 9
 + S.u.S.E. Linux Personal 9.2
+ S.u.S.E. Linux Personal 9.1
+ S.u.S.E. Linux Personal 9.0 x86_64
 + S.u.S.E. Linux Personal 9.0
+ S.u.S.E. Linux Personal 8.2
+ SuSE SUSE Linux Enterprise Server 8
 + SuSE SUSE Linux Enterprise Server 7
 Adobe Acrobat Reader (UNIX) 5.0 7
Adobe Acrobat Reader (UNIX) 5.0 6
Adobe Acrobat Reader (UNIX) 5.0 5
- Caldera OpenLinux Server 3.1
- Caldera OpenLinux Workstation 3.1
- Debian Linux 2.2
- Mandriva Linux Mandrake 8.1
- Mandriva Linux Mandrake 8.0
- Mandriva Linux Mandrake 7.2
- Mandriva Linux Mandrake 7.1
- RedHat Linux 7.3
- RedHat Linux 7.1
- RedHat Linux 7.0
- S.u.S.E. Linux 8.0
- S.u.S.E. Linux 7.1
- Slackware Linux 8.0
- Slackware Linux 7.1
- Slackware Linux 7.0
- Sun Solaris 8_sparc
 - Sun Solaris 7.0
 - Sun Solaris 2.6
 Adobe Acrobat Reader (UNIX) 5.0
Adobe Acrobat Reader (UNIX) 4.0 5
- Caldera OpenLinux Server 3.1
- Caldera OpenLinux Server 3.1
- Caldera OpenLinux Workstation 3.1
- Caldera OpenLinux Workstation 3.1
- Debian Linux 2.2
- Debian Linux 2.2
- Mandriva Linux Mandrake 8.0
- Mandriva Linux Mandrake 8.0
- Mandriva Linux Mandrake 7.2
- Mandriva Linux Mandrake 7.2
- Mandriva Linux Mandrake 7.1
- Mandriva Linux Mandrake 7.1
- RedHat Linux 7.1
- RedHat Linux 7.1
- RedHat Linux 7.0
- RedHat Linux 7.0
- S.u.S.E. Linux 7.2
- S.u.S.E. Linux 7.2
- S.u.S.E. Linux 7.1
- S.u.S.E. Linux 7.1
- S.u.S.E. Linux 7.0
- S.u.S.E. Linux 7.0
- Slackware Linux 8.0
- Slackware Linux 7.1
- Slackware Linux 7.1
- Slackware Linux 7.0
- Slackware Linux 7.0
- Sun Solaris 8_sparc
 - Sun Solaris 8_sparc
 - Sun Solaris 7.0
 - Sun Solaris 7.0
 - Sun Solaris 2.6
 - Sun Solaris 2.6
Not Vulnerable: KDE KDE 3.5.6

Discussion

Multiple PDF Readers Multiple Remote Buffer Overflow Vulnerability

Multiple PDF readers are prone to multiple remote buffer-overflow vulnerabilities because the applications fail to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

An attacker may be able exploit this issue to execute arbitrary code within the context of the affected application. In some circumstances, the vulnerability can be exploited only to cause a denial of service.

Exploit / POC

Multiple PDF Readers Multiple Remote Buffer Overflow Vulnerability

An attacker can exploit these issues by enticing an unsuspecting victim to view a specially crafted PDF file.

The following proof of concept is available:

Solution / Fix

Multiple PDF Readers Multiple Remote Buffer Overflow Vulnerability

Solution:
KDE has released updates to address this issue.

Please see the referenced advisories for more information.


Turbolinux Turbolinux 10 F...

Xpdf Xpdf 3.0.1 (Patch 2)

Turbolinux Turbolinux FUJI

TurboLinux Multimedia

Turbolinux Home

Poppler poppler 0.5.3

Poppler poppler 0.5.4

KDE KOffice 1.2.92

KDE KOffice 1.3 beta1

KDE KOffice 1.3 beta2

KDE KOffice 1.3 beta3

KDE KOffice 1.3

KDE KOffice 1.3.3

KDE KOffice 1.3.5

KDE KOffice 1.4

KDE KOffice 1.5.2

KDE KOffice 1.5.91

KDE KOffice 1.6.1

Turbolinux Turbolinux Server 10.0

Turbolinux Turbolinux Desktop 10.0

KDE KDE 3.2.3

KDE KDE 3.3

KDE KDE 3.3.1

KDE KDE 3.5

KDE KDE 3.5.2

KDE KDE 3.5.5

References

© CVE.report 2026 |

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report