Unrated severityNVD Advisory· Published Nov 8, 2007· Updated Jun 16, 2026
CVE-2007-4352
CVE-2007-4352
Description
Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- osv-coords2 versionspkg:rpm/opensuse/cups&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/poppler&distro=openSUSE%20Tumbleweed
< 2.3.3op2-4.2+ 1 more
- (no CPE)range: < 2.3.3op2-4.2
- (no CPE)range: < 21.08.0-1.3
Patches
Vulnerability mechanics
References
82- secunia.com/advisories/27260nvdPatchVendor Advisory
- secunia.com/secunia_research/2007-88/advisory/nvdVendor Advisory
- secunia.com/advisories/26503nvd
- secunia.com/advisories/27553nvd
- secunia.com/advisories/27573nvd
- secunia.com/advisories/27574nvd
- secunia.com/advisories/27575nvd
- secunia.com/advisories/27577nvd
- secunia.com/advisories/27578nvd
- secunia.com/advisories/27599nvd
- secunia.com/advisories/27615nvd
- secunia.com/advisories/27618nvd
- secunia.com/advisories/27619nvd
- secunia.com/advisories/27632nvd
- secunia.com/advisories/27634nvd
- secunia.com/advisories/27636nvd
- secunia.com/advisories/27637nvd
- secunia.com/advisories/27640nvd
- secunia.com/advisories/27641nvd
- secunia.com/advisories/27642nvd
- secunia.com/advisories/27645nvd
- secunia.com/advisories/27656nvd
- secunia.com/advisories/27658nvd
- secunia.com/advisories/27705nvd
- secunia.com/advisories/27721nvd
- secunia.com/advisories/27724nvd
- secunia.com/advisories/27743nvd
- secunia.com/advisories/27856nvd
- secunia.com/advisories/28043nvd
- secunia.com/advisories/28812nvd
- secunia.com/advisories/29104nvd
- secunia.com/advisories/29604nvd
- secunia.com/advisories/30168nvd
- security.gentoo.org/glsa/glsa-200711-22.xmlnvd
- security.gentoo.org/glsa/glsa-200711-34.xmlnvd
- security.gentoo.org/glsa/glsa-200805-13.xmlnvd
- slackware.com/security/viewer.phpnvd
- support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.htmlnvd
- support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.htmlnvd
- support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.htmlnvd
- support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.htmlnvd
- support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.htmlnvd
- www.debian.org/security/2008/dsa-1480nvd
- www.debian.org/security/2008/dsa-1509nvd
- www.debian.org/security/2008/dsa-1537nvd
- www.kde.org/info/security/advisory-20071107-1.txtnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.mandriva.com/security/advisoriesnvd
- www.novell.com/linux/security/advisories/2007_60_pdf.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1021.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1022.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1024.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1025.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1026.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1027.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1029.htmlnvd
- www.redhat.com/support/errata/RHSA-2007-1030.htmlnvd
- www.securityfocus.com/archive/1/483372nvd
- www.securityfocus.com/bid/26367nvd
- www.securitytracker.com/idnvd
- www.ubuntu.com/usn/usn-542-1nvd
- www.ubuntu.com/usn/usn-542-2nvd
- www.vupen.com/english/advisories/2007/3774nvd
- www.vupen.com/english/advisories/2007/3775nvd
- www.vupen.com/english/advisories/2007/3776nvd
- www.vupen.com/english/advisories/2007/3779nvd
- www.vupen.com/english/advisories/2007/3786nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/38306nvd
- issues.rpath.com/browse/RPL-1926nvd
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9979nvd
- www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.htmlnvd
- www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.htmlnvd
News mentions
0No linked articles in our index yet.