Integer Overflow and Divide-by-Zero Vulnerability in Xpdf 4.05 and Earlier
CVE-2024-7867

6.2MEDIUM

Key Information:

Vendor

Xpdf

Status
XPDF
Vendor
CVE Published:
15 August 2024

What is CVE-2024-7867?

The vulnerability in Xpdf allows for integer overflow and divide-by-zero scenarios due to the handling of very large coordinates in a page box. This can lead to unexpected behaviors, including application crashes. If exploited, an attacker may leverage this flaw to disrupt normal operation of the application or to introduce further vulnerabilities. Users are advised to update to the latest version of Xpdf to mitigate any risks associated with this issue.

References

https://www.xpdfreader.com/security-bug/CVE-2024-7867.html

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

.