CVE-2023-3044

CVSS V2 None CVSS V3 None

Description

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

Overview

CVE ID
CVE-2023-3044

Assigner
GandC

Vulnerability Status
PUBLISHED

Published Version
2023-06-02T22:32:31.677Z

Last Modified Date
2023-06-02T22:32:31.677Z

Weakness Enumerations

CWE	URL
CWE-369	http://cwe.mitre.org/data/definitions/369.html

References

Reference URL	Reference Tags
https://www.xpdfreader.com/security-bug/CVE-2023-3044.html
https://github.com/baker221/poc-xpdf

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-3044
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-3044

History

Created	Old Value	New Value	Data Type	Notes
2024-06-24 21:00:35				Added to TrackCVE