DCTStream:: reset()

🗓️ 07 Nov 2007 18:04:00Reported by RedHatType

redhat

redhat🔗 access.redhat.com👁 3 Views

Integer overflow in DCTStream::reset allows remote code execution via a crafted PDF, causing a heap overflow.

Reporter	Title	Published	Views	Family All 314
ALT Linux	Security fix for the ALT Linux 5 package xpdf version 3.02-alt3	12 Nov 200700:00	–	altlinux
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities in the SUSE Linux Enterprise operating system that allow attackers to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec
BDU FSTEC	Vulnerabilities of the Red Hat Enterprise Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information	28 Apr 201500:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
Red Hat Enterprise Linux	any	i386	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.i386.rpm
Red Hat Enterprise Linux	any	ia64	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.ia64.rpm
Red Hat Enterprise Linux	any	ppc	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.ppc.rpm
Red Hat Enterprise Linux	any	s390	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.s390.rpm
Red Hat Enterprise Linux	any	s390x	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.s390x.rpm
Red Hat Enterprise Linux	any	x86_64	gpdf	2.8.2-7.7.1	gpdf-2.8.2-7.7.1.x86_64.rpm
Red Hat Enterprise Linux	any	i386	gpdf-debuginfo	2.8.2-7.7.1	gpdf-debuginfo-2.8.2-7.7.1.i386.rpm
Red Hat Enterprise Linux	any	ia64	gpdf-debuginfo	2.8.2-7.7.1	gpdf-debuginfo-2.8.2-7.7.1.ia64.rpm
Red Hat Enterprise Linux	any	ppc	gpdf-debuginfo	2.8.2-7.7.1	gpdf-debuginfo-2.8.2-7.7.1.ppc.rpm
Red Hat Enterprise Linux	any	s390	gpdf-debuginfo	2.8.2-7.7.1	gpdf-debuginfo-2.8.2-7.7.1.s390.rpm

Source	Link
access	www.access.redhat.com/security/cve/CVE-2007-5392
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2007-5392
cve	www.cve.org/CVERecord

25 Jun 2026 10:34Current

8High risk

Vulners AI Score8

CVSS 29.3

EPSS0.06408

DCTStream reset Integer overflow Remote code execution Heap overflow Xpdf vulnerability Crafted PDF