Lucene search

K
nvd[email protected]NVD:CVE-2007-6561
HistoryDec 28, 2007 - 12:46 a.m.

CVE-2007-6561

2007-12-2800:46:00
CWE-119
web.nvd.nist.gov
4

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.9

Confidence

Low

EPSS

0.181

Percentile

96.3%

Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDF_load_image function that results in an overflow in the pdc_fsearch_fopen function, and possibly other vectors.

Affected configurations

Nvd
Node
pdflibpdflibMatch7.0.2
VendorProductVersionCPE
pdflibpdflib7.0.2cpe:2.3:a:pdflib:pdflib:7.0.2:*:*:*:*:*:*:*

CVSS2

5.7

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:M/Au:N/C:N/I:N/A:C

AI Score

7.9

Confidence

Low

EPSS

0.181

Percentile

96.3%