CVE-2023-2662: Divide-by-zero in Xpdf 4.04 due to bad color space object
Published May 11, 2023
·Updated
In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero.
Affected Software
7 affected componentsFixes available
Xpdfreader Xpdf<=4.04
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
alpine/xpdf<4.05-r0
4.05-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/xpdfto a version that resolves this vulnerability.Fixed in 4.05-r0
Event History
May 11, 2023
CVE Published
via MITRE·08:08 PM
Data Sourced
via MITRE·08:08 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via OSV·09:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this Xpdf vulnerability?
The vulnerability ID for this Xpdf vulnerability is CVE-2023-2662.
2
What is the affected software and version for this vulnerability?
The affected software and version for this vulnerability is Xpdf 4.04 (and earlier).
3
What is the severity rating for this vulnerability?
The severity rating for this vulnerability is medium with a value of 5.5.
4
How can a bad color space object in the input PDF file cause a divide-by-zero?
A bad color space object in the input PDF file can cause a divide-by-zero due to a vulnerability in Xpdf 4.04 (and earlier).
5
Is there a fix available for this vulnerability?
It is recommended to update to a version of Xpdf that is not affected by this vulnerability.