Divide By Zero

CVE-2019-10021

Medium

5.5/10

Summary

An issue was discovered in Xpdf 4.01.01. There is an FPE in the function ImageStream::ImageStream at Stream.cc for nComps.

Attack Complexity: LOW
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: REQUIRED
Privileges Required: NONE
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-369 - Divide By Zero

The product divides a value by zero.

References

Advisory Timeline

Published Mar 25, 2019