CVE-2023-2662

CWE-3695 documents5 sources
Severity
5.5MEDIUM
EPSS
0.0%
top 91.52%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Xpdfreader XpdfXpdf Xpdf
Timeline
PublishedMay 11

Description

In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.

CVSS vector

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 1.4 | Impact: 1.4

Affected Packages2 packages

▶NVDxpdfreader/xpdf4.04
▶CVEListV5xpdf/xpdf4.04

🔴Vulnerability Details

3
OSV
CVE-2023-2662: In Xpdf 4↗2023-05-11
▶
GHSA
GHSA-q94w-f7gq-q946: In Xpdf 4↗2023-05-11
▶
CVEList
Divide-by-zero in Xpdf 4.04 due to bad color space object↗2023-05-11
▶

📋Vendor Advisories

1
Debian
CVE-2023-2662: xpdf - In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can c...↗2023
▶
CVE-2023-2662 (MEDIUM CVSS 5.5) | In Xpdf 4.04 (and earlier) | cvebase.io