CVE-2024-7867
CVE-2024-7867 · Integer overflow and divide-by-zero in Xpdf 4.05 due to bogus page box coordinates
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Xpdf 4.05 (and earlier), very large coordinates in a page box can cause an integer overflow and divide-by-zero.
CVSS 2.1 · Low · EPSS 0.2%
- Published
- Updated
Stack: system
Affected products and versions
xpdf
- Versions
- ≥ 0, ≤ 4.05: Affected (Version)
No fix published
ipe Ubuntu:16.04:LTS
- Versions
- 7.1.4-2.1
- 7.1.8-1
- 7.1.10-1
- 7.1.10-1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:16.04:LTS
- Versions
- 3.03-17ubuntu2
- 3.03-17ubuntu3
- 3.03-17ubuntu5
- 3.03-18
- 3.04-1
- 3.04-1build1
- 3.04-1ubuntu1
- 3.04-1ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:18.04:LTS
- Versions
- 7.2.7-2
- 7.2.7-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:18.04:LTS
- Versions
- 3.04-4build1
- 3.04-5
- 3.04-5ubuntu2
- 3.04-6ubuntu1
- 3.04-7
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:20.04:LTS
- Versions
- 7.2.9-1
- 7.2.13-2
- 7.2.13-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:22.04:LTS
- Versions
- 7.2.23+dfsg1-2
- 7.2.24+dfsg1-1
- 7.2.24+dfsg1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:22.04:LTS
- Versions
- 3.04+git20210103-3build1
- 3.04+git20211021-1
- 3.04+git20211021-1ubuntu1
- 3.04+git20220201-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:24.04:LTS
- Versions
- 7.2.27+dfsg1-2
- 7.2.28-2
- 7.2.28-2.1build2
- 7.2.28-2.1build3
- 7.2.28-2.1build4
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:24.04:LTS
- Versions
- 3.04+git20220601-1ubuntu1
- 3.04+git20220601-1ubuntu2
- 3.04+git20231213-1
- 3.04+git20240118-1
- 3.04+git20240124-1
- 3.04+git20240202-1
- 3.04+git20240202-1build1
- 3.04+git20240202-1build2
- 3.04+git20240202-1build3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:25.10
- Versions
- 7.2.30-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:25.10
- Versions
- 3.04+git20250304-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.10
- Versions
- 7.2.30-1build2
- 7.2.30-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.10
- Versions
- 3.04+git20260220-1
- 3.04+git20260220-1ubuntu1
- 3.04+git20260802-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
ipe Ubuntu:26.04:LTS
- Versions
- 7.2.30-1build1
- 7.2.30-1build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
xpdf Ubuntu:26.04:LTS
- Versions
- 3.04+git20250304-1
- 3.04+git20250304-1build1
- 3.04+git20260220-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published