DEBIAN-CVE-2007-4352

See a problem?
Please try reporting it to the source first.
Source
https://security-tracker.debian.org/tracker/DEBIAN-CVE-2007-4352
Import Source
https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2007-4352.json
JSON Data
https://api.test.osv.dev/v1/vulns/DEBIAN-CVE-2007-4352
Upstream
Published
2007-11-08T02:46:00Z
Modified
2025-09-19T06:14:56Z
Summary
[none]
Details

Array index error in the DCTStream::readProgressiveDataUnit method in xpdf/Stream.cc in Xpdf 3.02pl1, as used in poppler, teTeX, KDE, KOffice, CUPS, and other products, allows remote attackers to trigger memory corruption and execute arbitrary code via a crafted PDF file.

References

Affected packages

Debian:11

cups

Package

Name
cups
Purl
pkg:deb/debian/cups?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.22-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

libextractor

Package

Name
libextractor
Purl
pkg:deb/debian/libextractor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.12-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

poppler

Package

Name
poppler
Purl
pkg:deb/debian/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.2-1

Ecosystem specific 

{
    "urgency": "medium"
}

xpdf

Package

Name
xpdf
Purl
pkg:deb/debian/xpdf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.02-1.3

Ecosystem specific 

{
    "urgency": "medium"
}

Debian:12

cups

Package

Name
cups
Purl
pkg:deb/debian/cups?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.22-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

libextractor

Package

Name
libextractor
Purl
pkg:deb/debian/libextractor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.12-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

poppler

Package

Name
poppler
Purl
pkg:deb/debian/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.2-1

Ecosystem specific 

{
    "urgency": "medium"
}

xpdf

Package

Name
xpdf
Purl
pkg:deb/debian/xpdf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.02-1.3

Ecosystem specific 

{
    "urgency": "medium"
}

Debian:13

cups

Package

Name
cups
Purl
pkg:deb/debian/cups?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.22-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

libextractor

Package

Name
libextractor
Purl
pkg:deb/debian/libextractor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.12-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

poppler

Package

Name
poppler
Purl
pkg:deb/debian/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.2-1

Ecosystem specific 

{
    "urgency": "medium"
}

xpdf

Package

Name
xpdf
Purl
pkg:deb/debian/xpdf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.02-1.3

Ecosystem specific 

{
    "urgency": "medium"
}

Debian:14

cups

Package

Name
cups
Purl
pkg:deb/debian/cups?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.1.22-7

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

libextractor

Package

Name
libextractor
Purl
pkg:deb/debian/libextractor?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.5.12-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

poppler

Package

Name
poppler
Purl
pkg:deb/debian/poppler?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
0.6.2-1

Ecosystem specific 

{
    "urgency": "medium"
}

xpdf

Package

Name
xpdf
Purl
pkg:deb/debian/xpdf?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
3.02-1.3

Ecosystem specific 

{
    "urgency": "medium"
}