CVE-2007-0103: Input Validation
First published: Tue Jan 09 2007(Updated: )
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Adobe Acrobat Reader Notification Manager | <=7.0.8 | |
| <=7.0.8 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/21910
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html
- http://docs.info.apple.com/article.html?artnum=305214
- http://www.securitytracker.com/id?1017749
- http://secunia.com/advisories/24479
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html
- http://www.vupen.com/english/advisories/2007/0930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31364
Frequently Asked Questions
What is the severity of CVE-2007-0103?
CVE-2007-0103 has a high severity rating due to its potential to cause denial of service and arbitrary code execution.
How do I fix CVE-2007-0103?
To fix CVE-2007-0103, update Adobe Acrobat Reader to version 8.0.0 or later.
What versions of Adobe Acrobat Reader are affected by CVE-2007-0103?
CVE-2007-0103 affects all versions of Adobe Acrobat Reader before 8.0.0.
What types of attacks can CVE-2007-0103 lead to?
CVE-2007-0103 can lead to denial of service, arbitrary code execution, or memory corruption.
Is it safe to open PDF files with CVE-2007-0103 vulnerabilities?
It is not safe to open PDF files that may exploit CVE-2007-0103 without ensuring the software is updated to avoid potential security risks.
- agent/type
- agent/references
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/source
- agent/softwarecombine
- agent/tags
- agent/event
- vendor/adobe
- canonical/adobe acrobat reader notification manager
- version/adobe acrobat reader notification manager/7.0.8