CVE ID:	CVE-2007-0104
Description:	The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE before 3.5.5, (c) poppler before 0.5.4, and other products, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
Test IDs:	1.3.6.1.4.1.25623.1.0.57817   1.3.6.1.4.1.25623.1.0.58029   1.3.6.1.4.1.25623.1.0.57838   1.3.6.1.4.1.25623.1.0.57802   1.3.6.1.4.1.25623.1.0.57800   1.3.6.1.4.1.25623.1.0.840167   1.3.6.1.4.1.25623.1.0.65184   1.3.6.1.4.1.25623.1.0.57803   1.3.6.1.4.1.25623.1.0.840035   1.3.6.1.4.1.25623.1.0.59095   1.3.6.1.4.1.25623.1.0.57799   1.3.6.1.4.1.25623.1.0.57801
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-0104 BugTraq ID: 21910 http://www.securityfocus.com/bid/21910 Bugtraq: 20070116 [KDE Security Advisory] kpdf/kword/xpdf denial of service vulnerability (Google Search) http://www.securityfocus.com/archive/1/457055/100/0/threaded Cert/CC Advisory: TA07-072A http://www.us-cert.gov/cas/techalerts/TA07-072A.html http://www.mandriva.com/security/advisories?name=MDKSA-2007:018 http://www.mandriva.com/security/advisories?name=MDKSA-2007:019 http://www.mandriva.com/security/advisories?name=MDKSA-2007:020 http://www.mandriva.com/security/advisories?name=MDKSA-2007:021 http://www.mandriva.com/security/advisories?name=MDKSA-2007:022 http://www.mandriva.com/security/advisories?name=MDKSA-2007:024 http://projects.info-pull.com/moab/MOAB-06-01-2007.html http://securitytracker.com/id?1017514 http://www.securitytracker.com/id?1017749 http://secunia.com/advisories/23791 http://secunia.com/advisories/23799 http://secunia.com/advisories/23808 http://secunia.com/advisories/23813 http://secunia.com/advisories/23815 http://secunia.com/advisories/23839 http://secunia.com/advisories/23844 http://secunia.com/advisories/23876 http://secunia.com/advisories/24204 http://secunia.com/advisories/24479 SuSE Security Announcement: SUSE-SR:2007:003 (Google Search) http://www.novell.com/linux/security/advisories/2007_3_sr.html http://www.ubuntu.com/usn/usn-410-1 http://www.ubuntu.com/usn/usn-410-2 http://www.vupen.com/english/advisories/2007/0203 http://www.vupen.com/english/advisories/2007/0212 http://www.vupen.com/english/advisories/2007/0244 http://www.vupen.com/english/advisories/2007/0930 XForce ISS Database: multiple-vendor-pdf-code-execution(31364) https://exchange.xforce.ibmcloud.com/vulnerabilities/31364