medium
6.8
CWE
20
Advisory Published
Updated

CVE-2007-0104: Input Validation

First published: Tue Jan 09 2007(Updated: )

The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.

Credit: cve@mitre.org

Affected SoftwareAffected VersionHow to fix
Xpdf=3.0
Xpdf=3.0.1
Xpdf=3.0.1_pl1
Xpdf=3.0.1_pl2
Xpdf=3.0_pl2
KDE Kde Beta 3=3.2
KDE Kde Beta 3=3.2.1
KDE Kde Beta 3=3.2.2
KDE Kde Beta 3=3.2.3
KDE Kde Beta 3=3.3
KDE Kde Beta 3=3.3.1
KDE Kde Beta 3=3.3.2
KDE Kde Beta 3=3.4
KDE Kde Beta 3=3.4.1
KDE Kde Beta 3=3.4.2
KDE Kde Beta 3=3.4.3
KDE Kde Beta 3=3.5

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2007-0104?

    CVE-2007-0104 has been classified with a potential severity level that includes denial of service and arbitrary code execution.

  • How do I fix CVE-2007-0104?

    To mitigate CVE-2007-0104, users are advised to upgrade to the latest versions of affected software such as xpdf or KDE.

  • What software is affected by CVE-2007-0104?

    CVE-2007-0104 affects various versions of xpdf, kpdf, and poppler, particularly prior to specified versions.

  • Can CVE-2007-0104 cause data loss?

    Yes, CVE-2007-0104 could potentially lead to memory corruption which might result in data loss.

  • Is CVE-2007-0104 exploitable remotely?

    Yes, CVE-2007-0104 can be exploited by remote attackers, potentially leading to significant impacts such as denial of service.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203