Is CVE-2007-3387 being actively exploited?

CVE-2007-3387 is not currently listed in the CISA Known Exploited Vulnerabilities (KEV) catalog.

What is the CVSS score for CVE-2007-3387?

CVE-2007-3387 has a CVSS 2.0 base score of 6.8 (MEDIUM).

CVE-2007-3387

MEDIUM · CVSS 6.8EPSS 8.6%EU EUVD

Integer overflow in the StreamPredictor::StreamPredictor function in xpdf 3.02, as used in (1) poppler before 0.5.91, (2) gpdf before 2.8.2, (3) kpdf, (4) kdegraphics, (5) CUPS, (6) PDFedit, and other products, might allow remote attackers to execute arbitrary code via a crafted PDF file that triggers a stack-based buffer overflow in the StreamPredictor::getNextLine function.

Key facts

CVSS score: 6.8 (v2.0)
Severity: MEDIUM
CVSS vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness (CWE): CWE-190
EPSS score: 8.6% (95th percentile)
In CISA KEV: No
In EU EUVD: Yes (EUVD-2007-3373)
Published: July 30, 2007
NVD last modified: June 16, 2026
Status: Modified

EU Vulnerability Database (EUVD)

This vulnerability is also tracked by ENISA as EUVD-2007-3373 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.

View on the EU Vulnerability Database

Affected products

apple / cups
canonical / ubuntu linux
canonical / ubuntu linux
canonical / ubuntu linux
debian / debian linux
debian / debian linux
freedesktop / poppler
gpdf project / gpdf
xpdfreader / xpdf

References

ftp://ftp.foolabs.com/pub/xpdf/xpdf-3.02pl1.patch(Broken Link)
ftp://patches.sgi.com/support/free/security/advisories/20070801-01-P.asc(Broken Link)
http://bugs.gentoo.org/show_bug.cgi?id=187139(Issue Tracking, Third Party Advisory)
http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=248194(Issue Tracking, Third Party Advisory)
http://osvdb.org/40127(Broken Link)
http://secunia.com/advisories/26188(Third Party Advisory)
http://secunia.com/advisories/26251(Third Party Advisory)
http://secunia.com/advisories/26254(Third Party Advisory)
http://secunia.com/advisories/26255(Third Party Advisory)
http://secunia.com/advisories/26257(Third Party Advisory)
http://secunia.com/advisories/26278(Third Party Advisory)
http://secunia.com/advisories/26281(Third Party Advisory)
http://secunia.com/advisories/26283(Third Party Advisory)
http://secunia.com/advisories/26292(Third Party Advisory)
http://secunia.com/advisories/26293(Third Party Advisory)
http://secunia.com/advisories/26297(Third Party Advisory)
http://secunia.com/advisories/26307(Third Party Advisory)
http://secunia.com/advisories/26318(Third Party Advisory)
http://secunia.com/advisories/26325(Third Party Advisory)
http://secunia.com/advisories/26342(Third Party Advisory)
http://secunia.com/advisories/26343(Third Party Advisory)
http://secunia.com/advisories/26358(Third Party Advisory)
http://secunia.com/advisories/26365(Third Party Advisory)
http://secunia.com/advisories/26370(Third Party Advisory)
http://secunia.com/advisories/26395(Third Party Advisory)
http://secunia.com/advisories/26403(Third Party Advisory)
http://secunia.com/advisories/26405(Third Party Advisory)
http://secunia.com/advisories/26407(Third Party Advisory)
http://secunia.com/advisories/26410(Third Party Advisory)
http://secunia.com/advisories/26413(Third Party Advisory)
http://secunia.com/advisories/26425(Third Party Advisory)
http://secunia.com/advisories/26432(Third Party Advisory)
http://secunia.com/advisories/26436(Third Party Advisory)
http://secunia.com/advisories/26467(Third Party Advisory)
http://secunia.com/advisories/26468(Third Party Advisory)
http://secunia.com/advisories/26470(Third Party Advisory)
http://secunia.com/advisories/26514(Third Party Advisory)
http://secunia.com/advisories/26607(Third Party Advisory)
http://secunia.com/advisories/26627(Third Party Advisory)
http://secunia.com/advisories/26862(Third Party Advisory)

Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS

Query CVEs from your AI assistant

The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.

Add the CVE brain