CVE-2007-0103 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 15.5% (pctl 97)
Patch early
A public exploit exists.
Description
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 15.45% — more likely to be exploited than 97% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-01-09 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| adobe | acrobat reader |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Multiple PDF Readers - Multiple Remote Buffer Overflows | 2007-01-06 |
References
- http://docs.info.apple.com/article.html?artnum=305214
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html
- http://secunia.com/advisories/24479
- http://www.securityfocus.com/bid/21910
- http://www.securitytracker.com/id?1017749
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html
- http://www.vupen.com/english/advisories/2007/0930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31364
- http://docs.info.apple.com/article.html?artnum=305214
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html
- http://secunia.com/advisories/24479
- http://www.securityfocus.com/bid/21910
- http://www.securitytracker.com/id?1017749
- http://www.us-cert.gov/cas/techalerts/TA07-072A.html
- http://www.vupen.com/english/advisories/2007/0930
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31364
→ the Explorer · watch your stack · NVD