Lucene search

MitreCVE-2007-2405

HistoryAug 03, 2007 - 10:17 a.m.

CVE-2007-2405

2007-08-0310:17:00

mitre

web.nvd.nist.gov

cve-2007-2405

integer underflow

preview

pdfkit

apple

mac os x 10.4.10

remote code execution

pdf

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON

Integer underflow in Preview in PDFKit on Apple Mac OS X 10.4.10 allows remote attackers to execute arbitrary code via a crafted PDF file.

Affected configurations

Nvd

Node

applemac_os_xMatch10.4.10

applemac_os_x_serverMatch10.4.10

AND

applepdfkit

VendorProductVersionCPE
applemac_os_x10.4.10cpe:2.3:o:apple:mac_os_x:10.4.10:*:*:*:*:*:*:*
applemac_os_x_server10.4.10cpe:2.3:o:apple:mac_os_x_server:10.4.10:*:*:*:*:*:*:*
applepdfkit*cpe:2.3:a:apple:pdfkit:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
apple	mac_os_x	10.4.10	cpe:2.3:o:apple:mac_os_x:10.4.10:::::::*
apple	mac_os_x_server	10.4.10	cpe:2.3:o:apple:mac_os_x_server:10.4.10:::::::*
apple	pdfkit	*	cpe:2.3:a:apple:pdfkit::::::::

References

docs.info.apple.com/article.html?artnum=306172

lists.apple.com/archives/security-announce//2007/Jul/msg00004.html

secunia.com/advisories/26235

www.securityfocus.com/bid/25159

www.vupen.com/english/advisories/2007/2732

exchange.xforce.ibmcloud.com/vulnerabilities/35734

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.03

Percentile

90.9%

JSON

Related for CVE-2007-2405