{"schemaVersion":3,"id":"CVE-2007-0104","aliases":["DEBIAN-CVE-2007-0104"],"status":"published","duplicateOf":null,"title":null,"description":"The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.","dates":{"published":"2007-01-09T00:00:00.000Z","modified":"2024-08-07T12:03:37.070Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.8,"severity":"medium","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":6.8,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.06229,"percentile":0.9347,"severity":"low","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0.1579999999999998,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.06071},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06229,"percentile":0.9347}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.06071,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.06229,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.06229,"percentile":0.9347}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_B061FA920C31C576","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/21910","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-20","name":"Improper Input Validation","description":"The product receives input or data, but it does\n        not validate or incorrectly validates that the input has the\n        properties that are required to process the data safely and\n        correctly.","type":"weakness","status":"Stable","abstraction":"Class","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/20.html"}],"affected":[{"vendor":"debian","product":"poppler","name":"poppler","label":"poppler","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/poppler","purlType":"deb","versions":[{"text":"< 0.4.5-5.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 0.4.5-5.1","eol":null,"hubHref":null},{"vendor":"debian","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":"Debian","cpePart":null,"purl":"pkg:deb/debian/xpdf","purlType":"deb","versions":[{"text":"< 3.02","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 3.02","eol":null,"hubHref":null},{"vendor":"kde","product":"kde","name":"kde","label":"kde","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"3.2","noFixRecorded":false,"fixedIn":null},{"text":"3.2.1","noFixRecorded":false,"fixedIn":null},{"text":"3.2.2","noFixRecorded":false,"fixedIn":null},{"text":"3.2.3","noFixRecorded":false,"fixedIn":null},{"text":"3.3","noFixRecorded":false,"fixedIn":null},{"text":"3.3.1","noFixRecorded":false,"fixedIn":null},{"text":"3.3.2","noFixRecorded":false,"fixedIn":null},{"text":"3.4","noFixRecorded":false,"fixedIn":null},{"text":"3.4.1","noFixRecorded":false,"fixedIn":null},{"text":"3.4.2","noFixRecorded":false,"fixedIn":null},{"text":"3.4.3","noFixRecorded":false,"fixedIn":null},{"text":"3.5","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.2 | 3.2.1 | 3.2.2 | 3.2.3 | 3.3 | 3.3.1 | 3.3.2 | 3.4 | 3.4.1 | 3.4.2 | 3.4.3 | 3.5","eol":null,"hubHref":"/vendor/kde/kde"},{"vendor":"xpdf","product":"xpdf","name":"xpdf","label":"xpdf","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.0","noFixRecorded":false,"fixedIn":null},{"text":"3.0.1","noFixRecorded":false,"fixedIn":null},{"text":"3.0.1_pl1","noFixRecorded":false,"fixedIn":null},{"text":"3.0.1_pl2","noFixRecorded":false,"fixedIn":null},{"text":"3.0_pl2","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.0 | 3.0.1 | 3.0.1_pl1 | 3.0.1_pl2 | 3.0_pl2","eol":null,"hubHref":"/vendor/xpdf/xpdf"}],"affectedCount":4,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/23815","label":"secunia.com/advisories/23815","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:022","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:022","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:020","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:020","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA07-072A.html","label":"www.us-cert.gov/cas/techalerts/TA07-072A.html","hostname":"www.us-cert.gov","tags":["Third Party Advisory","X Refsource CERT","US Government Resource"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:021","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:021","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.kde.org/info/security/advisory-20070115-1.txt","label":"www.kde.org/info/security/advisory-20070115-1.txt","hostname":"www.kde.org","tags":["X Refsource CONFIRM"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:019","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:019","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://secunia.com/advisories/23799","label":"secunia.com/advisories/23799","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23839","label":"secunia.com/advisories/23839","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://docs.info.apple.com/article.html?artnum=305214","label":"docs.info.apple.com/article.html?artnum=305214","hostname":"docs.info.apple.com","tags":["X Refsource CONFIRM"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/31364","label":"exchange.xforce.ibmcloud.com/vulnerabilities/31364","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]},{"url":"http://www.ubuntu.com/usn/usn-410-2","label":"www.ubuntu.com/usn/usn-410-2","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:018","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:018","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://securitytracker.com/id?1017514","label":"securitytracker.com/id?1017514","hostname":"securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://secunia.com/advisories/23791","label":"secunia.com/advisories/23791","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA"]},{"url":"http://www.novell.com/linux/security/advisories/2007_3_sr.html","label":"www.novell.com/linux/security/advisories/2007_3_sr.html","hostname":"www.novell.com","tags":["Vendor Advisory","X Refsource SUSE"]},{"url":"http://support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html","label":"support.novell.com/techcenter/psdb/44d7cb9b669d58e0ce5aa5d7ab2c7c53.html","hostname":"support.novell.com","tags":["X Refsource CONFIRM"]},{"url":"http://www.securityfocus.com/bid/21910","label":"www.securityfocus.com/bid/21910","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit"]},{"url":"http://www.mandriva.com/security/advisories?name=MDKSA-2007:024","label":"www.mandriva.com/security/advisories?name=MDKSA-2007:024","hostname":"www.mandriva.com","tags":["Vendor Advisory","X Refsource MANDRIVA"]},{"url":"http://www.securitytracker.com/id?1017749","label":"www.securitytracker.com/id?1017749","hostname":"www.securitytracker.com","tags":["VDB Entry","X Refsource SECTRACK"]},{"url":"http://projects.info-pull.com/moab/MOAB-06-01-2007.html","label":"projects.info-pull.com/moab/MOAB-06-01-2007.html","hostname":"projects.info-pull.com","tags":["X Refsource MISC"]},{"url":"http://secunia.com/advisories/23844","label":"secunia.com/advisories/23844","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.ubuntu.com/usn/usn-410-1","label":"www.ubuntu.com/usn/usn-410-1","hostname":"www.ubuntu.com","tags":["Vendor Advisory","X Refsource UBUNTU"]},{"url":"http://www.vupen.com/english/advisories/2007/0203","label":"www.vupen.com/english/advisories/2007/0203","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23876","label":"secunia.com/advisories/23876","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.securityfocus.com/archive/1/457055/100/0/threaded","label":"www.securityfocus.com/archive/1/457055/100/0/threaded","hostname":"www.securityfocus.com","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://www.vupen.com/english/advisories/2007/0244","label":"www.vupen.com/english/advisories/2007/0244","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0212","label":"www.vupen.com/english/advisories/2007/0212","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/0930","label":"www.vupen.com/english/advisories/2007/0930","hostname":"www.vupen.com","tags":["VDB Entry","X Refsource VUPEN","Vendor Advisory"]},{"url":"https://issues.rpath.com/browse/RPL-964","label":"issues.rpath.com/browse/RPL-964","hostname":"issues.rpath.com","tags":["X Refsource CONFIRM"]},{"url":"http://secunia.com/advisories/23813","label":"secunia.com/advisories/23813","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/24204","label":"secunia.com/advisories/24204","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/23808","label":"secunia.com/advisories/23808","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://secunia.com/advisories/24479","label":"secunia.com/advisories/24479","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-0104","label":"security-tracker.debian.org/tracker/CVE-2007-0104","hostname":"security-tracker.debian.org","tags":["Advisory"]}],"lineage":{"upstream":[],"downstream":["OPENSUSE-SU-2024:10707-1","OPENSUSE-SU-2024:11181-1"],"duplicates":[],"related":["OPENSUSE-SU-2024:10707-1","OPENSUSE-SU-2024:11181-1"]},"timeline":[{"kind":"published","date":"2007-01-09T00:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-07T12:03:37.070Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":38,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-19T15:04:41.688Z","stale":false,"partial":false}}