CVE-2023-3436
EUVD-2023-4410027.06.2023, 21:15
Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| xpdfreader | xpdf | 4.04 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| ipe |
| ||||||||||||||||||||
| xpdf |
|
Common Weakness Enumeration
- CWE-833 - DeadlockThe software contains multiple threads or executable segments that are waiting for each other to release a necessary lock, resulting in deadlock.
- CWE-667 - Improper LockingThe software does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.