CVE-2023-3044 - An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result

CVE-2023-3044

Summary

An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. This is related to CVE-2022-30524, but the problem here is caused by a very large page size, rather than by a very large character coordinate.

References

Vulnerable Configurations

cpe:2.3:a:xpdfreader:xpdf:0.2:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.2:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.3:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.3:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.4:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.4:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.5:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.5:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.6:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.6:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.7:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.7:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.7a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.7a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.80:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.80:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.90:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.90:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91b:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91b:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91c:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.91c:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92b:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92b:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92c:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92c:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92d:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92d:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92e:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.92e:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.93:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.93:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.93a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:0.93a:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:1.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:1.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:1.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:1.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.02:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.02:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.02:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.02:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:2.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl3:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.00:pl3:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.01:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:-:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl1:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl2:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl3:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl3:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl4:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl4:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl5:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.02:pl5:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.03-17:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.03-17:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04-4:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04-4:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04-13:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:3.04-13:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.00:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.0:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.1:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.0.2:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.01.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.01.01:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.02:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.02:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.03:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*
cpe:2.3:a:xpdfreader:xpdf:4.04:*:*:*:*:*:*:*

CVSS

Base:	None
Impact:
Exploitability:

CWE

CWE-369

CAPEC

Access

Vector	Complexity	Authentication

Impact

Confidentiality	Integrity	Availability

Last major update

13-06-2023 - 17:55

Published

02-06-2023 - 23:15

Last modified

13-06-2023 - 17:55