Vulnerabilities > CVE-2023-3044 - Divide By Zero vulnerability in Xpdfreader Xpdf

CVSS 3.3 - LOW

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

LOW

local

low complexity

xpdfreader

CWE-369

NVD

Published: 2023-06-02

Updated: 2023-06-13

Summary

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Vulnerable Configurations

Part	Description	Count
Application	Xpdfreader Xpdfreader Xpdf 0.2 Xpdfreader Xpdf 0.3 Xpdfreader Xpdf 0.4 Xpdfreader Xpdf 0.5 Xpdfreader Xpdf 0.6 Xpdfreader Xpdf 0.7 Xpdfreader Xpdf 0.7A Xpdfreader Xpdf 0.80 Xpdfreader Xpdf 0.90 Xpdfreader Xpdf 0.91 Xpdfreader Xpdf 0.91A Xpdfreader Xpdf 0.91B Xpdfreader Xpdf 0.91C Xpdfreader Xpdf 0.92 Xpdfreader Xpdf 0.92A Xpdfreader Xpdf 0.92B Xpdfreader Xpdf 0.92C Xpdfreader Xpdf 0.92D Xpdfreader Xpdf 0.92E Xpdfreader Xpdf 0.93 Xpdfreader Xpdf 0.93A Xpdfreader Xpdf 1.00 Xpdfreader Xpdf 1.01 Xpdfreader Xpdf 2.00 Xpdfreader Xpdf 2.01 Xpdfreader Xpdf 2.02 Xpdfreader Xpdf 2.03 Xpdfreader Xpdf 3.00 Xpdfreader Xpdf 3.01 Xpdfreader Xpdf 3.02 Xpdfreader Xpdf 3.03 Xpdfreader Xpdf 3.03-17 Xpdfreader Xpdf 3.04 Xpdfreader Xpdf 3.04-4 Xpdfreader Xpdf 3.04-13 Xpdfreader Xpdf 4.00 Xpdfreader Xpdf 4.0.0 Xpdfreader Xpdf 4.0.1 Xpdfreader Xpdf 4.0.2 Xpdfreader Xpdf 4.01 Xpdfreader Xpdf 4.01.01 Xpdfreader Xpdf 4.02 Xpdfreader Xpdf 4.03 Xpdfreader Xpdf 4.04	56

Common Weakness Enumeration (CWE)

CWE-369 - Divide By Zero

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References