Description
The Adobe PDF specification 1.3, as implemented by Apple Mac OS X Preview, allows remote attackers to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code execution, or memory corruption, via a PDF file with a (1) crafted catalog dictionary or (2) a crafted Pages attribute that references an invalid page tree node.
References
- TA07-072A third-party-advisory
- http://docs.info.apple.com/article.html?artnum=305214
- multiple-vendor-pdf-code-execution(31364) vdb-entry
- 21910 vdb-entry
- 31221 vdb-entry
- 1017749 vdb-entry
- http://projects.info-pull.com/moab/MOAB-06-01-2007.html
- ADV-2007-0930 vdb-entry
- 24479 third-party-advisory