CVE-2007-0103
Last modified
CVE-2007-0103 is a vulnerability of currently unknown severity. The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.. EPSS estimates a 15.35% chance of exploitation in the next 30 days.
Description
The Adobe PDF specification 1.3, as implemented by Adobe Acrobat before 8.0.0, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Adobe | Acrobat Reader | <= 7.0.8 |
References
- http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA07-072A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0103?
How severe is CVE-2007-0103?
How do I fix CVE-2007-0103?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0097Multiple stack-based buffer overflows in the (1) LoadTree an…
- CVE-2007-0098Directory traversal vulnerability in language.php in VerliAd…
- CVE-2007-0099Race condition in the msxml3 module in Microsoft XML Core Se…
- CVE-2007-0100The Perforce client does not restrict the set of files that …
- CVE-2007-0101Cross-site request forgery (CSRF) vulnerability in SPINE all…
- CVE-2007-0102The Adobe PDF specification 1.3, as implemented by Apple Mac…
- CVE-2007-0104The Adobe PDF specification 1.3, as implemented by (a) xpdf …
- CVE-2007-0105Stack-based buffer overflow in the CSAdmin service in Cisco …
- CVE-2007-0106Cross-site scripting (XSS) vulnerability in the CSRF protect…
- CVE-2007-0107WordPress before 2.0.6, when mbstring is enabled for PHP, de…
- CVE-2007-0108nwgina.dll in Novell Client 4.91 SP3 for Windows 2000/XP/200…
- CVE-2007-0109wp-login.php in WordPress 2.0.5 and earlier displays differe…
Are you affected by CVE-2007-0103?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST