Lucene search

K
cve[email protected]CVE-2007-6561
HistoryDec 28, 2007 - 12:46 a.m.

CVE-2007-6561

2007-12-2800:46:00
CWE-119
web.nvd.nist.gov
25
pdflib
buffer overflow
cve-2007-6561
security vulnerability
pdf_load_image
pdc_fsearch_fopen
nvd

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

7.9 High

AI Score

Confidence

Low

0.187 Low

EPSS

Percentile

96.3%

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDF_load_image function that results in an overflow in the pdc_fsearch_fopen function, and possibly other vectors.

Affected configurations

NVD
Node
pdflibpdflibMatch7.0.2
CPENameOperatorVersion
pdflib:pdflibpdflibeq7.0.2

5.7 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

7.9 High

AI Score

Confidence

Low

0.187 Low

EPSS

Percentile

96.3%