Debian/xpdf: unknown

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

Action: Upgrade xpdf to 3.02-1.3 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-5392#Debian:13/xpdf
• https://security-tracker.debian.org/tracker/CVE-2007-5392

published 2007-11-08T02:46:00Z · modified 2026-10-21T17:47:37.019448790Z · JSON