cbcvebase.
CVE-2019-10024
published 2019-03-25

CVE-2019-10024: An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.

medium5.5CVSS 3.0
AVLACLPRNUIRSUCNINAH
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function Splash::scaleImageYuXu at Splash.cc for y Bresenham parameters.

Affected

3 ranges
VendorProductVersion rangeFixed in
debianxpdf
freedesktoppoppler>= 0 < 0.41.0-0ubuntu1.40.41.0-0ubuntu1.4
xpdfreaderxpdf

CVSS provenance

nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
osv5.5MEDIUM