PT-2023-5261 · Djvulibre+7 · Djvulibre+7
Zfeixq
·
Publicado
2023-08-22
·
Atualizado
2026-02-23
·
CVE-2021-46312
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
DjVuLibre version 3.5.28
Description
The issue is related to a lack of check for division by zero in the IW44EncodeCodec.cpp component of the DjVuLibre library, which is used for viewing, creating, and editing DjVu files. This can be exploited by a remote attacker to cause a denial of service. The vulnerability allows attackers to cause a denial of service via divide by zero.
Recommendations
For DjVuLibre version 3.5.28, consider disabling the IW44EncodeCodec.cpp component as a temporary workaround until a patch is available. Restrict access to the vulnerable component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
Divide By Zero
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Astra Linux
Debian
Djvulibre
Linuxmint
Red Os
Suse
Ubuntu