CVE-2007-6561
PDFlib 7.0.2 - Multiple Remote Buffer Overflow Vulnerabilities
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
2Exploited in Wild
-Decision
Descriptions
Multiple stack-based buffer overflows in PDFLib allow user-assisted remote attackers to execute arbitrary code via a long filename argument to the PDF_load_image function that results in an overflow in the pdc_fsearch_fopen function, and possibly other vectors.
Múltiples desbordamientos de búfer basado en pila en PDFLib permiten a atacantes remotos con la intervención del usuario ejecutar código de su elección mediante un argumento filename (nombre de archivo) largo para la función PDF_load_image que resulta en un desbordamiento en la función pdc_fsearch_fopen, y posiblemente otros vectores.
poplix reported multiple boundary errors in the pdc_fsearch_fopen() function when processing overly long filenames. Versions less than 7.0.2_p8 are affected.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2007-12-27 CVE Reserved
- 2007-12-28 CVE Published
- 2014-01-15 First Exploit
- 2024-08-07 CVE Updated
- 2025-04-20 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (8)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/40275 | Vdb Entry | |
| http://secunia.com/advisories/29304 | Third Party Advisory | |
| http://securityreason.com/securityalert/3495 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/485479/100/0/threaded | Mailing List |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/30928 | 2014-01-15 | |
| http://www.securityfocus.com/bid/27001 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/28239 | 2018-10-15 | |
| http://security.gentoo.org/glsa/glsa-200803-17.xml | 2018-10-15 |