CVE-2019-10023: Divide by Zero
An issue was discovered in Xpdf 4.01.01. There is an FPE in the function PostScriptFunction::exec at Function.cc for the psOpMod case.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2019-10023?
CVE-2019-10023 is a vulnerability discovered in Xpdf 4.01.01 that causes a floating point exception (FPE) in the PostScriptFunction::exec function.
How severe is CVE-2019-10023?
CVE-2019-10023 has a severity rating of 5.5 (medium).
Which software versions are affected by CVE-2019-10023?
The affected software versions include poppler 0.41.0-0ubuntu1.14 (Ubuntu) and xpdf 3.04-13, 3.04+git20210103-3, and 3.04+git20220601-1 (Debian).
How can I fix CVE-2019-10023?
To fix CVE-2019-10023, update to poppler 0.41.0-0ubuntu1.14 (Ubuntu) or xpdf versions 3.04-13, 3.04+git20210103-3, or 3.04+git20220601-1 (Debian).
Is there any additional information about CVE-2019-10023?
Yes, you can find additional information about CVE-2019-10023 at the following links: [MITRE CVE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10023), [Xpdf Forum](https://forum.xpdfreader.com/viewtopic.php?f=3&t=41276), [Ubuntu Security Notice](https://ubuntu.com/security/notices/USN-4042-1).