CVE-2007-5392

NameCVE-2007-5392
DescriptionInteger overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SuSE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-1480-1, DSA-1509-1, DSA-1537-1, DTSA-85-1, DTSA-86-1
NVD severityhigh (attack range: remote)
Debian Bugs450628, 450629, 450630, 450631

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
cups (PTS)wheezy, wheezy (security)1.5.3-5+deb7u6fixed
jessie, jessie (security)1.7.5-11+deb8u1fixed
stretch, sid2.1.4-4fixed
libextractor (PTS)wheezy1:0.6.3-5fixed
jessie1:1.3-2fixed
stretch, sid1:1.3-4fixed
poppler (PTS)wheezy0.18.4-6fixed
wheezy (security)0.18.4-6+deb7u1fixed
jessie, jessie (security)0.26.5-2+deb8u1fixed
stretch, sid0.44.0-3fixed
swftools (PTS)wheezy0.9.2+ds1-3fixed
jessie0.9.2+git20130725-2fixed
stretch, sid0.9.2+git20130725-4fixed
xpdf (PTS)wheezy3.03-10fixed
jessie3.03-17fixed
stretch, sid3.04-1fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
cupssource(unstable)1.1.22-7high
cupsyssource(unstable)(not affected)
gpdfsource(unstable)(unfixed)high
kdegraphicssource(unstable)4:3.5.8-2medium450630
kdegraphicssourceetch(not affected)
kdegraphicssourcelenny4:3.5.7-4+lenny1highDTSA-85-1
kofficesource(unstable)1:1.6.3-4medium450631
kofficesourceetch1:1.6.1-2etch2highDSA-1509-1
kofficesourcelenny1:1.6.3-3+lenny1highDTSA-86-1
libextractorsource(unstable)0.5.12-1high
pdftohtmlsource(unstable)(unfixed)high
pdftohtmlsourceetch0.36-13etch1high
popplersource(unstable)0.6.2-1medium450628
popplersourceetch0.4.5-5.1etch2highDSA-1480-1
swftoolssource(unstable)0.9.2+ds1-2high
tetex-binsource(unstable)3.0-12high
xpdfsource(unstable)3.02-1.3medium450629
xpdfsourceetch3.01-9.1+etch2highDSA-1537-1

Notes

[etch] - kdegraphics <not-affected> (Vulnerable code not used)
pdftex links to poppler since 3.0-12, thus marking as fixed
- cupsys <not-affected> (we use xpdf-utils in sarge and poppler-utils since etch to not embedd this code)
cups uses xpdf-utils and poppler-utils
libextractor uses internal pdf decoder since 0.5.12-1, thus marking as fixed

Search for package or bug name: Reporting problems