CVE-2007-0102
Current Description
The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Basic Data
| Published | January 09, 2007 |
|---|
| Last Modified | July 29, 2017 |
|---|
| Assigner | cve@mitre.org |
|---|
| Data Type | CVE |
|---|
| Data Format | MITRE |
|---|
| Data Version | 4.0 |
|---|
| Problem Type | CWE-20 |
|---|
| CVE Data Version | 4.0 |
|---|
Base Metric V2
| CVSS 2 - Version | 2.0 |
|---|
| CVSS 2 - Vector String | AV:N/AC:M/Au:N/C:P/I:P/A:P |
|---|
| CVSS 2 - Access Vector | NETWORK |
|---|
| CVSS 2 - Access Complexity | MEDIUM |
|---|
| CVSS 2 - Authentication | NONE |
|---|
| CVSS 2 - Confidentiality Impact | PARTIAL |
|---|
| CVSS 2 - Availability Impact | PARTIAL |
|---|
| CVSS 2 - Base Score | 6.8 |
|---|
| Severity | MEDIUM |
|---|
| Exploitability Score | 8.6 |
|---|
| Impact Score | 6.4 |
|---|
| Obtain All Privilege | false |
|---|
| Obtain User Privilege | false |
|---|
| Obtain Other Privilege | false |
|---|
Base Metric V3
No data provided.
Configurations
-
OR - Configuration 1
| Cpe Version | Part | Vendor | Product | Version | Update | Edition | Language | SW Edition | Target SW | Target HW | Other | Version Start Including | Version End Including | Version Start Excluding | Version End Excluding |
|---|
| 2.3 | Application | Apple | Preview | 3.0.8 | * | * | * | * | * | * | * | | | | |
Vulnerable Software List
References
| Name | Source | URL | Tags |
|---|
| http://docs.info.apple.com/article.html?artnum=305214 | http://docs.info.apple.com/article.html?artnum=305214 | CONFIRM | |
| 31221 | http://osvdb.org/31221 | OSVDB | |
| http://projects.info-pull.com/moab/MOAB-06-01-2007.html | http://projects.info-pull.com/moab/MOAB-06-01-2007.html | MISC | Exploit |
| 24479 | http://secunia.com/advisories/24479 | SECUNIA | |
| 21910 | http://www.securityfocus.com/bid/21910 | BID | Exploit PATCH |
| 1017749 | http://www.securitytracker.com/id?1017749 | SECTRACK | |
| TA07-072A | http://www.us-cert.gov/cas/techalerts/TA07-072A.html | CERT | US Government Resource |
| ADV-2007-0930 | http://www.vupen.com/english/advisories/2007/0930 | VUPEN | |
| multiple-vendor-pdf-code-execution(31364) | https://exchange.xforce.ibmcloud.com/vulnerabilities/31364 | XF | |
Follow @discotekdotca