NVD脆弱性詳細

CVE-2007-5393

概要	Heap-based buffer overflow in the CCITTFaxStream::lookChar method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a PDF file that contains a crafted CCITTFaxDecode filter.
公表日	2007年11月8日11:46
登録日	2021年1月29日14:21
最終更新日	2017年9月29日10:29

CVSS2.0 : HIGH
スコア	9.3
ベクター	AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV)	ネットワーク
攻撃条件の複雑さ(AC)	中
攻撃前の認証要否(Au)	不要
機密性への影響(C)	高
完全性への影響(I)	高
可用性への影響(A)	高
全ての特権を取得	はい
ユーザー権限を取得	いいえ
その他の権限を取得	いいえ
ユーザー操作が必要	いいえ

影響を受けるソフトウェアの構成

構成1		以上	以下	より上	未満
cpe:2.3:a:xpdf:xpdf:3.02p11:::::::*

関連情報、対策とツール

No	URL	refsource	タグ
1	http://secunia.com/advisories/26503	SECUNIA
2	http://secunia.com/advisories/27260	SECUNIA	Patch Vendor Advisory
3	http://secunia.com/advisories/27553	SECUNIA	Vendor Advisory
4	http://secunia.com/advisories/27573	SECUNIA	Vendor Advisory
5	http://secunia.com/advisories/27574	SECUNIA
6	http://secunia.com/advisories/27575	SECUNIA	Vendor Advisory
7	http://secunia.com/advisories/27577	SECUNIA	Vendor Advisory
8	http://secunia.com/advisories/27578	SECUNIA	Vendor Advisory
9	http://secunia.com/advisories/27579	SECUNIA	Vendor Advisory
10	http://secunia.com/advisories/27599	SECUNIA
11	http://secunia.com/advisories/27615	SECUNIA
12	http://secunia.com/advisories/27618	SECUNIA
13	http://secunia.com/advisories/27619	SECUNIA
14	http://secunia.com/advisories/27632	SECUNIA
15	http://secunia.com/advisories/27634	SECUNIA
16	http://secunia.com/advisories/27636	SECUNIA
17	http://secunia.com/advisories/27637	SECUNIA
18	http://secunia.com/advisories/27640	SECUNIA
19	http://secunia.com/advisories/27641	SECUNIA
20	http://secunia.com/advisories/27642	SECUNIA
21	http://secunia.com/advisories/27645	SECUNIA
22	http://secunia.com/advisories/27656	SECUNIA
23	http://secunia.com/advisories/27658	SECUNIA
24	http://secunia.com/advisories/27705	SECUNIA
25	http://secunia.com/advisories/27718	SECUNIA
26	http://secunia.com/advisories/27721	SECUNIA
27	http://secunia.com/advisories/27724	SECUNIA
28	http://secunia.com/advisories/27743	SECUNIA
29	http://secunia.com/advisories/27772	SECUNIA
30	http://secunia.com/advisories/27856	SECUNIA
31	http://secunia.com/advisories/28043	SECUNIA
32	http://secunia.com/advisories/28812	SECUNIA
33	http://secunia.com/advisories/29104	SECUNIA
34	http://secunia.com/advisories/29604	SECUNIA
35	http://secunia.com/advisories/30168	SECUNIA
36	http://secunia.com/secunia_research/2007-88/advisory/	MISC	Vendor Advisory
37	http://security.gentoo.org/glsa/glsa-200711-22.xml	GENTOO
38	http://security.gentoo.org/glsa/glsa-200711-34.xml	GENTOO
39	http://security.gentoo.org/glsa/glsa-200805-13.xml	GENTOO
40	http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882	SLACKWARE
41	http://support.avaya.com/elmodocs2/security/ASA-2007-476.htm	CONFIRM
42	http://support.novell.com/techcenter/psdb/1d5fd29802b2ef7e342e733731f1e933.html	CONFIRM
43	http://support.novell.com/techcenter/psdb/3867a5092daac43cd6a92e6107d9fbce.html	CONFIRM
44	http://support.novell.com/techcenter/psdb/43ad7b3569dba59e7ba07677edc01cad.html	CONFIRM
45	http://support.novell.com/techcenter/psdb/da3498f05433976cc548cc4eaf8349c8.html	CONFIRM
46	http://support.novell.com/techcenter/psdb/f83e024a65d69ebc810d2117815b940d.html	CONFIRM
47	http://www.debian.org/security/2007/dsa-1408	DEBIAN
48	http://www.debian.org/security/2008/dsa-1480	DEBIAN
49	http://www.debian.org/security/2008/dsa-1509	DEBIAN
50	http://www.debian.org/security/2008/dsa-1537	DEBIAN
51	http://www.kde.org/info/security/advisory-20071107-1.txt	CONFIRM
52	http://www.mandriva.com/security/advisories?name=MDKSA-2007:219	MANDRIVA
53	http://www.mandriva.com/security/advisories?name=MDKSA-2007:220	MANDRIVA
54	http://www.mandriva.com/security/advisories?name=MDKSA-2007:221	MANDRIVA
55	http://www.mandriva.com/security/advisories?name=MDKSA-2007:222	MANDRIVA
56	http://www.mandriva.com/security/advisories?name=MDKSA-2007:223	MANDRIVA
57	http://www.mandriva.com/security/advisories?name=MDKSA-2007:227	MANDRIVA
58	http://www.mandriva.com/security/advisories?name=MDKSA-2007:228	MANDRIVA
59	http://www.mandriva.com/security/advisories?name=MDKSA-2007:230	MANDRIVA
60	http://www.novell.com/linux/security/advisories/2007_60_pdf.html	SUSE
61	http://www.redhat.com/support/errata/RHSA-2007-1021.html	REDHAT	Vendor Advisory
62	http://www.redhat.com/support/errata/RHSA-2007-1022.html	REDHAT	Vendor Advisory
63	http://www.redhat.com/support/errata/RHSA-2007-1023.html	REDHAT	Vendor Advisory
64	http://www.redhat.com/support/errata/RHSA-2007-1024.html	REDHAT	Vendor Advisory
65	http://www.redhat.com/support/errata/RHSA-2007-1025.html	REDHAT
66	http://www.redhat.com/support/errata/RHSA-2007-1026.html	REDHAT	Vendor Advisory
67	http://www.redhat.com/support/errata/RHSA-2007-1027.html	REDHAT
68	http://www.redhat.com/support/errata/RHSA-2007-1028.html	REDHAT	Vendor Advisory
69	http://www.redhat.com/support/errata/RHSA-2007-1029.html	REDHAT	Vendor Advisory
70	http://www.redhat.com/support/errata/RHSA-2007-1030.html	REDHAT	Vendor Advisory
71	http://www.redhat.com/support/errata/RHSA-2007-1031.html	REDHAT	Vendor Advisory
72	http://www.redhat.com/support/errata/RHSA-2007-1051.html	REDHAT	Vendor Advisory
73	http://www.securityfocus.com/archive/1/483372	BUGTRAQ
74	http://www.securityfocus.com/bid/26367	BID
75	http://www.securitytracker.com/id?1018905	SECTRACK
76	http://www.ubuntu.com/usn/usn-542-1	UBUNTU
77	http://www.ubuntu.com/usn/usn-542-2	UBUNTU
78	http://www.vupen.com/english/advisories/2007/3774	VUPEN
79	http://www.vupen.com/english/advisories/2007/3775	VUPEN
80	http://www.vupen.com/english/advisories/2007/3776	VUPEN
81	http://www.vupen.com/english/advisories/2007/3779	VUPEN
82	http://www.vupen.com/english/advisories/2007/3786	VUPEN
83	https://exchange.xforce.ibmcloud.com/vulnerabilities/38304	XF
84	https://issues.rpath.com/browse/RPL-1926	CONFIRM
85	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9839	OVAL
86	https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00369.html	FEDORA
87	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00215.html	FEDORA
88	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00224.html	FEDORA
89	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00238.html	FEDORA
90	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html	FEDORA
91	https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html	FEDORA

共通脆弱性一覧

No	CWE	名前	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html