CVE Feed

Dashboard / CVE / CVE-2007-5393

CVE-2007-5393

Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.

Published:Nov 7, 2007

Last Modified:Apr 23, 2026

EPS:Nov 8, 2007

EPSS Score:0.14245

CVSS Score:9.3

Affected Products

Vendor

Product

Action

Vendor

Redhat

Product

Enterprise Linux

Redhat

Enterprise Linux

Vendor

Xpdf

Product

Xpdf

Xpdf

Xpdf

Exploits

No exploit reference

Common Weakness Enumeration

CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-10 Buffer Overflow via Environment Variables

CAPEC-100 Overflow Buffers

CAPEC-123 Buffer Manipulation

CAPEC-14 Client-side Injection-induced Buffer Overflow

CAPEC-24 Filter Failure through Buffer Overflow

CAPEC-42 MIME Conversion

CAPEC-44 Overflow Binary Resource File

CAPEC-45 Buffer Overflow via Symbolic Links

CAPEC-46 Overflow Variables and Tags

CAPEC-47 Buffer Overflow via Parameter Expansion

CAPEC-8 Buffer Overflow in an API Call

CAPEC-9 Buffer Overflow in Local Command-Line Utilities

Related CVEs

CVE-2026-77159 (CVSS 5.5) — A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a pat…

CVE-2026-88914 (CVSS 4.4) — A flaw was found in GStreamer's gst-plugins-good isomp4 plugin. When processing a specially crafted MP4 or MOV…

CVE-2026-84828 (CVSS 6.5) — A flaw was found in PCS (Pacemaker Configuration System). A local attacker with membership in the 'haclient' g…

CVE-2026-88859 (CVSS 6.3) — A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted…

CVE-2026-18147 (CVSS 8.1) — A flaw was found in FreeIPA. An unauthenticated remote attacker could exploit a DOM Cross-Site Scripting (XSS)…

CVE-2026-87853 (CVSS 7.5) — A flaw was found in SSSD's IdP authentication provider. The eval_access_token_buf() function compares the OIDC…

CVE-2026-88924 (CVSS 7) — A flaw was found in the admin backend of gvfs. The privileged gvfsd-admin daemon changes the ownership of newl…

CVE-2026-87876 (CVSS 3) — Two case-insensitive comparisons on request-derived usernames outside the main authorization path in CUPS's sc…

CVE-2026-87875 (CVSS 4.3) — The cupsUTF32ToUTF8() function in CUPS's cups/transcode.c lacks a source-length bound and can read past the en…

CVE-2026-87766 (CVSS 8.8) — A flaw was found in bubblewrap. During sandbox setup, creating files or directories under the new root can fol…

References

http://secunia.com/advisories/26503

http://secunia.com/advisories/27260

http://secunia.com/advisories/27553

http://secunia.com/advisories/27573

http://secunia.com/advisories/27574

http://secunia.com/advisories/27575

http://secunia.com/advisories/27577

http://secunia.com/advisories/27578

http://secunia.com/advisories/27579

http://secunia.com/advisories/27599

http://secunia.com/advisories/27615

http://secunia.com/advisories/27618

http://secunia.com/advisories/27619

http://secunia.com/advisories/27632

http://secunia.com/advisories/27634

http://secunia.com/advisories/27636

http://secunia.com/advisories/27637

http://secunia.com/advisories/27640

http://secunia.com/advisories/27641

http://secunia.com/advisories/27642

http://secunia.com/advisories/27645

http://secunia.com/advisories/27656

http://secunia.com/advisories/27658

http://secunia.com/advisories/27705

http://secunia.com/advisories/27718

http://secunia.com/advisories/27721

http://secunia.com/advisories/27724

http://secunia.com/advisories/27743

http://secunia.com/advisories/27772

http://secunia.com/advisories/27856

http://secunia.com/advisories/28043

http://secunia.com/advisories/28812

http://secunia.com/advisories/29104

http://secunia.com/advisories/29604

http://secunia.com/advisories/30168

http://secunia.com/secunia_research/2007-88/advisory/

http://security.gentoo.org/glsa/glsa-200711-22.xml

http://security.gentoo.org/glsa/glsa-200711-34.xml

http://security.gentoo.org/glsa/glsa-200805-13.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882

http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm

http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html

http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html

http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html

http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html

http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html

http://www.debian.org/security/2007/dsa-1408

http://www.debian.org/security/2008/dsa-1480

http://www.debian.org/security/2008/dsa-1509

http://www.debian.org/security/2008/dsa-1537

http://www.kde.org/info/security/advisory-20071107-1.txt

http://www.mandriva.com/security/advisories?name=MDKSA-2007:219

http://www.mandriva.com/security/advisories?name=MDKSA-2007:220

http://www.mandriva.com/security/advisories?name=MDKSA-2007:221

http://www.mandriva.com/security/advisories?name=MDKSA-2007:222

http://www.mandriva.com/security/advisories?name=MDKSA-2007:223

http://www.mandriva.com/security/advisories?name=MDKSA-2007:227

http://www.mandriva.com/security/advisories?name=MDKSA-2007:228

http://www.mandriva.com/security/advisories?name=MDKSA-2007:230

http://www.novell.com/linux/security/advisories/2007_60_pdf.html

http://www.redhat.com/support/errata/RHSA-2007-1021.html

http://www.redhat.com/support/errata/RHSA-2007-1022.html

http://www.redhat.com/support/errata/RHSA-2007-1023.html

http://www.redhat.com/support/errata/RHSA-2007-1024.html

http://www.redhat.com/support/errata/RHSA-2007-1025.html

http://www.redhat.com/support/errata/RHSA-2007-1026.html

http://www.redhat.com/support/errata/RHSA-2007-1027.html

http://www.redhat.com/support/errata/RHSA-2007-1028.html

http://www.redhat.com/support/errata/RHSA-2007-1029.html

http://www.redhat.com/support/errata/RHSA-2007-1030.html

http://www.redhat.com/support/errata/RHSA-2007-1031.html

http://www.redhat.com/support/errata/RHSA-2007-1051.html

http://www.securityfocus.com/archive/1/483372

http://www.securityfocus.com/bid/26367

http://www.securitytracker.com/id?1018905

http://www.ubuntu.com/usn/usn-542-1

http://www.ubuntu.com/usn/usn-542-2

http://www.vupen.com/english/advisories/2007/3774

http://www.vupen.com/english/advisories/2007/3775

http://www.vupen.com/english/advisories/2007/3776

http://www.vupen.com/english/advisories/2007/3779

http://www.vupen.com/english/advisories/2007/3786

https://exchange.xforce.ibmcloud.com/vulnerabilities/38304

https://issues.rpath.com/browse/RPL-1926

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9839

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

http://secunia.com/advisories/26503

http://secunia.com/advisories/27260

http://secunia.com/advisories/27553

http://secunia.com/advisories/27573

http://secunia.com/advisories/27574

http://secunia.com/advisories/27575

http://secunia.com/advisories/27577

http://secunia.com/advisories/27578

http://secunia.com/advisories/27579

http://secunia.com/advisories/27599

http://secunia.com/advisories/27615

http://secunia.com/advisories/27618

http://secunia.com/advisories/27619

http://secunia.com/advisories/27632

http://secunia.com/advisories/27634

http://secunia.com/advisories/27636

http://secunia.com/advisories/27637

http://secunia.com/advisories/27640

http://secunia.com/advisories/27641

http://secunia.com/advisories/27642

http://secunia.com/advisories/27645

http://secunia.com/advisories/27656

http://secunia.com/advisories/27658

http://secunia.com/advisories/27705

http://secunia.com/advisories/27718

http://secunia.com/advisories/27721

http://secunia.com/advisories/27724

http://secunia.com/advisories/27743

http://secunia.com/advisories/27772

http://secunia.com/advisories/27856

http://secunia.com/advisories/28043

http://secunia.com/advisories/28812

http://secunia.com/advisories/29104

http://secunia.com/advisories/29604

http://secunia.com/advisories/30168

http://secunia.com/secunia_research/2007-88/advisory/

http://security.gentoo.org/glsa/glsa-200711-22.xml

http://security.gentoo.org/glsa/glsa-200711-34.xml

http://security.gentoo.org/glsa/glsa-200805-13.xml

http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882

http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm

http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html

http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html

http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html

http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html

http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html

http://www.debian.org/security/2007/dsa-1408

http://www.debian.org/security/2008/dsa-1480

http://www.debian.org/security/2008/dsa-1509

http://www.debian.org/security/2008/dsa-1537

http://www.kde.org/info/security/advisory-20071107-1.txt

http://www.mandriva.com/security/advisories?name=MDKSA-2007:219

http://www.mandriva.com/security/advisories?name=MDKSA-2007:220

http://www.mandriva.com/security/advisories?name=MDKSA-2007:221

http://www.mandriva.com/security/advisories?name=MDKSA-2007:222

http://www.mandriva.com/security/advisories?name=MDKSA-2007:223

http://www.mandriva.com/security/advisories?name=MDKSA-2007:227

http://www.mandriva.com/security/advisories?name=MDKSA-2007:228

http://www.mandriva.com/security/advisories?name=MDKSA-2007:230

http://www.novell.com/linux/security/advisories/2007_60_pdf.html

http://www.redhat.com/support/errata/RHSA-2007-1021.html

http://www.redhat.com/support/errata/RHSA-2007-1022.html

http://www.redhat.com/support/errata/RHSA-2007-1023.html

http://www.redhat.com/support/errata/RHSA-2007-1024.html

http://www.redhat.com/support/errata/RHSA-2007-1025.html

http://www.redhat.com/support/errata/RHSA-2007-1026.html

http://www.redhat.com/support/errata/RHSA-2007-1027.html

http://www.redhat.com/support/errata/RHSA-2007-1028.html

http://www.redhat.com/support/errata/RHSA-2007-1029.html

http://www.redhat.com/support/errata/RHSA-2007-1030.html

http://www.redhat.com/support/errata/RHSA-2007-1031.html

http://www.redhat.com/support/errata/RHSA-2007-1051.html

http://www.securityfocus.com/archive/1/483372

http://www.securityfocus.com/bid/26367

http://www.securitytracker.com/id?1018905

http://www.ubuntu.com/usn/usn-542-1

http://www.ubuntu.com/usn/usn-542-2

http://www.vupen.com/english/advisories/2007/3774

http://www.vupen.com/english/advisories/2007/3775

http://www.vupen.com/english/advisories/2007/3776

http://www.vupen.com/english/advisories/2007/3779

http://www.vupen.com/english/advisories/2007/3786

https://exchange.xforce.ibmcloud.com/vulnerabilities/38304

https://issues.rpath.com/browse/RPL-1926

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9839

https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High