CVE Vulnerabilities

CVE-2023-3044

Divide By Zero

Published: Jun 02, 2023 | Modified: Jun 13, 2023
CVSS 3.x
3.3
LOW
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdfs text extraction code.

This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Weakness

The product divides a value by zero.

Affected Software

Name Vendor Start Version End Version
Xpdf Xpdfreader * 4.05 (excluding)

References