CVE-2007-0103

{"id": "CVE-2007-0103", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2007-01-09T00:28:00.000", "references": [{"url": "http://docs.info.apple.com/article.html?artnum=305214", "source": "cve@mitre.org"}, {"url": "http://projects.info-pull.com/moab/MOAB-06-01-2007.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24479", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/21910", "tags": ["Exploit"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1017749", "source": "cve@mitre.org"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2007/0930", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31364", "source": "cve@mitre.org"}, {"url": "http://docs.info.apple.com/article.html?artnum=305214", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://projects.info-pull.com/moab/MOAB-06-01-2007.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/24479", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/21910", "tags": ["Exploit"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1017749", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA07-072A.html", "tags": ["US Government Resource"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2007/0930", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31364", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node."}, {"lang": "es", "value": "La especificaci\u00f3n de Adobe PDF 1.3, como se implementa en Adobe Acrobat anterior a 8.0.0, permite a atacantes remotos tener un impacto desconocido, posiblemente incluyendo denegaci\u00f3n de servicio (bucle infinito), ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n, o corrupci\u00f3n de memoria, mediante un archivo PDF con un (1) diccionario de cat\u00e1logo manipulado o (2) un atributo P\u00e1ginas (Pages) manipulado que referencia a un nodo inv\u00e1lido del \u00e1rbol de p\u00e1ginas."}], "lastModified": "2024-11-21T00:24:58.673", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FD055652-DA7A-4881-ACD3-9D491821DC73", "versionEndIncluding": "7.0.8"}], "operator": "OR"}]}], "vendorComments": [{"comment": "Some implementations of the PDF specification erroneously allow page tree objects that refer back to themselves. As a result, an infinite loop could be created. We believe this could only result in a denial of service against the application. We do not consider a user-assisted DoS of a client application to be a security issue.\n\n", "lastModified": "2008-01-09T00:00:00", "organization": "Red Hat"}], "sourceIdentifier": "cve@mitre.org"}