← Database

CVE-2007-5392

CRITICAL CVSS: 9.3 Published: 2007-11-08 Modified: 2026-06-16

Description

Integer overflow in the DCTStream::reset method in xpdf/Stream.cc in Xpdf 3.02p11 allows remote attackers to execute arbitrary code via a crafted PDF file, resulting in a heap-based buffer overflow.

Affected Platforms

Xpdf Xpdf

Weakness Type

CWE-119

References