CVE-2007-3387: apple cups Integer Overflow or Wraparound

CVSS: 6.8v2.0MediumModified

AliasesRHSA-2007:0720RHSA-2007:0729RHSA-2007:0730+16 more

Published 30-07-2007Last modified 07-08-2024

Some data may be incomplete

2 references with an unsupported link type were hidden.

Vulnerability summary

CVE-2007-3387 is a medium (CVSS 6.8) Integer Overflow or Wraparound vulnerability in apple cups. EPSS estimates a 8.57% chance of exploitation in the next 30 days, higher than 95% of scored vulnerabilities.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

6.8/10

010

Medium · v2.0 (NVD)

EPSS score

8.57%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1 · Duplicates 1 · Related 1

OPENSUSE-SU-2024:10707-1 CVE-2007-5049

Timeline

30-07-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

CVSS metrics

1 score · 1 source · 1 version

v2.06.8

EPSS trend

Probability

8.57%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 8.57% on 18-09-2026

18-09-202618-10-2026

EPSS score

8.57%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-190Integer Overflow or WraparoundThe product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

Affected systems

Redhat25 products

cups< 1:1.1.17-13.3.45 | < 1:1.1.22-0.rc1.9.20.2 | < 1:1.2.4-11.5.3.el5
cups-debuginfo< 1:1.1.17-13.3.45 | < 1:1.1.22-0.rc1.9.20.2 | < 1:1.2.4-11.5.3.el5
cups-devel< 1:1.1.17-13.3.45 | < 1:1.1.22-0.rc1.9.20.2 | < 1:1.2.4-11.5.3.el5
cups-libs< 1:1.1.17-13.3.45 | < 1:1.1.22-0.rc1.9.20.2 | < 1:1.2.4-11.5.3.el5
cups-lpd< 1:1.2.4-11.5.3.el5

Show all 25

Debian9 products

gpdf< 2.8.2-1.2sarge6
kdegraphics< 4:3.5.7-2lenny1 | < 4:3.3.2-2sarge5 | < 4:3.5.5-3etch1
koffice< 1:1.6.3-1lenny1 | < 1:1.6.1-2etch1
libextractor< 0.5.12-1 | < 0.4.2-2sarge6
pdfkit.framework< 0.8-2sarge4

Show all 9

Apple1 product

cups≤ 1.3.11

Canonical1 product

ubuntu_linuxEOL6.06 | 6.10 | 7.04

Freedesktop1 product

poppler< 0.5.91

Gpdf_project1 product

gpdf< 2.8.2

Xpdfreader1 product

xpdf3.02

7 vendors · 39 products

References

111 links

www.redhat.com/support/errata/RHSA-2007-0730.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.ubuntu.com/usn/usn-496-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.debian.org/security/2007/dsa-1355Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.vupen.com/english/advisories/2007/2705VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
www.novell.com/linux/security/advisories/2007_16_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
www.mandriva.com/security/advisories?name=MDKSA-2007:164Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
issues.rpath.com/browse/RPL-1596X Refsource CONFIRMBroken Link
www.mandriva.com/security/advisories?name=MDKSA-2007:165Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/26307Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:158Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory

Show all 100 references

www.debian.org/security/2007/dsa-1350Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.securityfocus.com/archive/1/476519/30/5400/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/26468Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/476508/100/0/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/26982Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26254Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26370Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1348Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/26325Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26413Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2007/dsa-1352Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.gentoo.org/security/en/glsa/glsa-200710-08.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.debian.org/security/2007/dsa-1354Vendor AdvisoryX Refsource DEBIANThird Party Advisory
issues.rpath.com/browse/RPL-1604X Refsource CONFIRMBroken Link
sourceforge.net/project/shownotes.php?release_id=535497X Refsource CONFIRMBroken Link
www.ubuntu.com/usn/usn-496-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:163Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.kde.org/info/security/advisory-20070730-1.txtX Refsource CONFIRMThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0731.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
osvdb.org/40127VDB EntryX Refsource OSVDBBroken Link
secunia.com/advisories/26862Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200805-13.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/26281Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0720.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
security.gentoo.org/glsa/glsa-200709-12.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.securityfocus.com/bid/25124VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/26514Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26467Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.761882Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
secunia.com/advisories/26432Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26410Third Party AdvisoryX Refsource SECUNIA
bugs.gentoo.org/show_bug.cgi?id=187139X Refsource MISCIssue TrackingThird Party Advisory
secunia.com/advisories/26607Third Party AdvisoryX Refsource SECUNIA
support.avaya.com/elmodocs2/security/ASA-2007-401.htmX Refsource CONFIRMThird Party Advisory
secunia.com/advisories/30168Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26358Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26365Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26627Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26293Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26283Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:159Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/27308Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:160Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
www.debian.org/security/2007/dsa-1357Vendor AdvisoryX Refsource DEBIANThird Party Advisory
security.gentoo.org/glsa/glsa-200709-17.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
secunia.com/advisories/26403Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2007-0732.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.debian.org/security/2007/dsa-1349Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/26251Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11149VDB EntrySignatureX Refsource OVALThird Party Advisory
secunia.com/advisories/26292Third Party AdvisoryX Refsource SECUNIA
www.mandriva.com/security/advisories?name=MDKSA-2007:161Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/26342Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26257Third Party AdvisoryX Refsource SECUNIA
bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194X Refsource MISCIssue TrackingThird Party Advisory
secunia.com/advisories/26395Third Party AdvisoryX Refsource SECUNIA
www.slackware.org/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.423670Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.mandriva.com/security/advisories?name=MDKSA-2007:162Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
security.gentoo.org/glsa/glsa-200711-34.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.securitytracker.com/id?1018473VDB EntryX Refsource SECTRACKThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0729.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/26188Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26278Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26425Third Party AdvisoryX Refsource SECUNIA
security.gentoo.org/glsa/glsa-200710-20.xmlVendor AdvisoryX Refsource GENTOOThird Party Advisory
www.vupen.com/english/advisories/2007/2704VDB EntryX Refsource VUPENPermissions RequiredThird Party Advisory
www.debian.org/security/2007/dsa-1347Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.redhat.com/support/errata/RHSA-2007-0735.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.securityfocus.com/archive/1/476765/30/5340/threadedMailing ListX Refsource BUGTRAQThird Party AdvisoryVDB Entry
secunia.com/advisories/27281Third Party AdvisoryX Refsource SECUNIA
issues.foresightlinux.org/browse/FL-471X Refsource CONFIRMBroken Link
secunia.com/advisories/26436Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26343Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26407Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26255Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27156Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26318Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26470Third Party AdvisoryX Refsource SECUNIA
www.novell.com/linux/security/advisories/2007_15_sr.htmlVendor AdvisoryX Refsource SUSEBroken Link
secunia.com/advisories/26297Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/26405Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/27637Third Party AdvisoryX Refsource SECUNIA
access.redhat.com/errata/RHSA-2007:0720Advisory
www.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=248194REPORT
security.access.redhat.com/data/csaf/v2/advisories/2007/rhsa-2007_0720.jsonAdvisory
access.redhat.com/security/cve/CVE-2007-3387REPORT
www.cve.org/CVERecord?id=CVE-2007-3387Advisory
nvd.nist.gov/vuln/detail/CVE-2007-3387Advisory
access.redhat.com/errata/RHSA-2007:0729Advisory

Showing 100 of 111. Use Open JSON for the complete list.

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities