Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
centosCentOS ProjectCESA-2007:0732
HistoryAug 01, 2007 - 7:45 a.m.

poppler security update

2007-08-0107:45:42
CentOS Project
lists.centos.org
43

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.1%

JSON

CentOS Errata and Security Advisory CESA-2007:0732

Poppler is a PDF rendering library, used by applications such as evince.

Maurycy Prodeus discovered an integer overflow flaw in the processing
of PDF files. An attacker could create a malicious PDF file that would
cause an application linked with poppler to crash or potentially execute
arbitrary code when opened. (CVE-2007-3387)

All users of poppler should upgrade to these updated packages, which
contain a backported patch to resolve this issue.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2007-August/076283.html
https://lists.centos.org/pipermail/centos-announce/2007-August/076284.html

Affected packages:
poppler
poppler-devel
poppler-utils

Upstream details at:
https://access.redhat.com/errata/RHSA-2007:0732

Related

nessus 64
gentoo 4
openvas 66
centos 7
debian 8
ubuntucve 1
osv 7
nvd 2
altlinux 2
prion 2
debiancve 1
oraclelinux 8
slackware 2
fedora 10
securityvulns 2
freebsd 1
redhat 6
ubuntu 2
veracode 1
cve 2
cvelist 1
nessus
nessus
RHEL 4 : gpdf (RHSA-2007:0730)
2007-07-31 00:00:00
Debian DSA-1350-1 : tetex-bin - integer overflow
2007-08-13 00:00:00
Scientific Linux Security Update : xpdf on SL4.x, SL3.x i386/x86_64
2012-08-01 00:00:00
gentoo
gentoo
PDFKit, ImageKits: Buffer overflow
2007-10-18 00:00:00
Poppler: Two buffer overflow vulnerabilities
2007-09-19 00:00:00
KOffice, KWord, KPDF, KDE Graphics Libraries: Stack-based buffer overflow
2007-10-09 00:00:00
openvas
openvas
Debian Security Advisory DSA 1350-1 (tetex-bin)
2008-01-17 00:00:00
Slackware Advisory SSA:2007-222-02 poppler
2012-09-11 00:00:00
Oracle: Security Advisory (ELSA-2007-0731)
2015-10-08 00:00:00
centos
centos
cups security update
2007-07-30 21:57:24
xpdf security update
2007-07-30 21:58:57
tetex security update
2007-08-08 01:40:59
debian
debian
[SECURITY] [DSA 1347-1] New xpdf packages fix arbitrary code execution
2007-08-04 12:55:49
[SECURITY] [DSA 1355-1] New kdegraphics packages fix arbitrary code execution
2007-08-13 19:18:23
[SECURITY] [DSA 1357-1] New koffice packages fix arbitrary code execution
2007-08-19 21:04:45
ubuntucve
ubuntucve
CVE-2007-3387
2007-07-30 00:00:00
osv
osv
gpdf - integer overflow
2007-08-13 00:00:00
tetex-bin
2007-08-06 00:00:00
poppler
2007-08-04 00:00:00
nvd
nvd
CVE-2007-3387
2007-07-30 23:17:00
CVE-2007-5049
2007-09-24 00:17:00
altlinux
altlinux
Security fix for the ALT Linux 5 package xpdf version 3.02-alt2
2007-08-08 00:00:00
Security fix for the ALT Linux 5 package kdegraphics version 3.5.7-alt2
2007-08-08 00:00:00
prion
prion
Integer overflow
2007-07-30 23:17:00
Design/Logic Flaw
2007-09-24 00:17:00
debiancve
debiancve
CVE-2007-3387
2007-07-30 23:17:00
oraclelinux
oraclelinux
Important: kdegraphics security update
2007-07-30 00:00:00
Important: poppler security update
2007-07-30 00:00:00
Important: tetex security update
2007-08-01 00:00:00
slackware
slackware
[slackware-security] poppler
2007-08-11 05:54:55
[slackware-security] xpdf
2007-08-11 05:56:09
fedora
fedora
[SECURITY] Fedora Core 6 Update: kdegraphics-3.5.7-1.fc6.1
2007-08-30 20:57:11
[SECURITY] Fedora 7 Update: tetex-3.0-40.1.fc7
2007-08-10 22:24:01
[SECURITY] Fedora 7 Update: koffice-1.6.3-9.fc7
2007-08-15 19:45:53
securityvulns
securityvulns
[USN-496-1] koffice vulnerability
2007-08-03 00:00:00
XPDF / KOffice integer overflow
2007-08-03 00:00:00
freebsd
freebsd
xpdf -- stack based buffer overflow
2007-07-30 00:00:00
redhat
redhat
(RHSA-2007:0735) Important: xpdf security update
2007-07-30 00:00:00
(RHSA-2007:0732) Important: poppler security update
2007-07-30 00:00:00
(RHSA-2007:0730) Important: gpdf security update
2007-07-30 00:00:00
ubuntu
ubuntu
koffice vulnerability
2007-08-03 00:00:00
poppler vulnerability
2007-08-07 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:15:05
cve
cve
CVE-2007-3387
2007-07-30 23:17:00
CVE-2007-5049
2007-09-24 00:17:00
cvelist
cvelist
CVE-2007-3387
2007-07-30 23:00:00

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.1%

JSON
Related for CESA-2007:0732
nessus64gentoo4openvas66centos7debian8ubuntucve1osv7nvd2altlinux2prion2debiancve1oraclelinux8slackware2fedora10securityvulns2freebsd1redhat6ubuntu2veracode1cve2cvelist1