CVE-2007-6021

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Heap-based buffer overflow in Adobe PageMaker 7.0.1 and 7.0.2 allows user-assisted remote attackers to execute arbitrary code via a .PMD file with a crafted font structure.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/27200Vendor Advisory
http://secunia.com/secunia_research/2007-80/Vendor Advisory
http://www.adobe.com/support/security/advisories/apsa08-10.htmlVendor Advisory
http://www.securityfocus.com/archive/1/497901/100/0/threaded
http://www.securityfocus.com/bid/31975Patch
http://www.securitytracker.com/id?1021119
http://www.vupen.com/english/advisories/2008/2955Vendor Advisory
http://secunia.com/advisories/27200Vendor Advisory
http://secunia.com/secunia_research/2007-80/Vendor Advisory
http://www.adobe.com/support/security/advisories/apsa08-10.htmlVendor Advisory
http://www.securityfocus.com/archive/1/497901/100/0/threaded
http://www.securityfocus.com/bid/31975Patch
http://www.securitytracker.com/id?1021119
http://www.vupen.com/english/advisories/2008/2955Vendor Advisory

Timeline

Published: Oct 30, 2008
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2007

CVE-2007-60257.1Stack-based buffer overflow in driver_wext.c in wpa_supplicant 0.6.0 and earlier allows remote attackers to cause a denial of service (crash CVE-2007-60269.3Stack-based buffer overflow in Microsoft msjet40.dll 4.0.8618.0 (aka Microsoft Jet Engine), as used by Access 2003 in Microsoft Office 2003 CVE-2007-60276.8PHP remote file inclusion vulnerability in admin.jjgallery.php in the Carousel Flash Image Gallery (com_jjgallery) component for Joomla! all CVE-2007-60286.8Multiple stack-based buffer overflows in the VSFlexGrid.VSFlexGridL ActiveX control in ComponentOne FlexGrid 7.1 Light allow remote attacker CVE-2007-60297.5Unspecified vulnerability in ClamAV 0.91.1 and 0.91.2 allows remote attackers to execute arbitrary code via a crafted e-mail message. NOTE: CVE-2007-603010.0Unspecified vulnerability in Weird Solutions BOOTPTurbo 1.2 has unknown impact and remote attack vectors. NOTE: this information is based u CVE-2007-60317.8Unspecified vulnerability in VanDyke VShell 3.0.1 allows remote attackers to cause a denial of service via unspecified vectors. NOTE: this CVE-2007-60327.5SQL injection vulnerability in calendar/page.asp in Aleris Web Publishing Server 3.0 allows remote attackers to execute arbitrary SQL comman CVE-2007-60338.8Invensys Wonderware InTouch 8.0 creates a NetDDE share with insecure permissions (Everyone/Full Control), which allows remote authenticated CVE-2007-60357.5SQL injection vulnerability in graph.php in Cacti before 0.8.7a allows remote attackers to execute arbitrary SQL commands via the local_grap CVE-2007-60367.1The parseRTSPRequestString function in LIVE555 Media Server 2007.11.01 and earlier allows remote attackers to cause a denial of service (dae CVE-2007-60374.3Cross-site scripting (XSS) vulnerability in ws/generic_api_call.pl in Citrix NetScaler 8.0 build 47.8 allows remote attackers to inject arbi