CVE-2011-0764
31.03.2011, 22:55
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| t1lib | t1lib | 𝑥 ≤ 5.1.2 |
| t1lib | t1lib | 0.1:alpha |
| t1lib | t1lib | 0.2:beta |
| t1lib | t1lib | 0.3:beta |
| t1lib | t1lib | 0.4:beta |
| t1lib | t1lib | 0.5:beta |
| t1lib | t1lib | 0.6:beta |
| t1lib | t1lib | 0.7:beta |
| t1lib | t1lib | 0.8:beta |
| t1lib | t1lib | 0.9 |
| t1lib | t1lib | 0.9.1 |
| t1lib | t1lib | 0.9.2 |
| t1lib | t1lib | 1.0 |
| t1lib | t1lib | 1.0.1 |
| t1lib | t1lib | 1.1.0 |
| t1lib | t1lib | 1.1.1 |
| t1lib | t1lib | 1.2 |
| t1lib | t1lib | 1.3 |
| t1lib | t1lib | 1.3.1 |
| t1lib | t1lib | 5.0.0 |
| t1lib | t1lib | 5.0.1 |
| t1lib | t1lib | 5.0.2 |
| t1lib | t1lib | 5.1.0 |
| t1lib | t1lib | 5.1.1 |
| foolabs | xpdf | 0.5a:a |
| foolabs | xpdf | 0.7a:a |
| foolabs | xpdf | 0.91a:a |
| foolabs | xpdf | 0.91b:b |
| foolabs | xpdf | 0.91c:c |
| foolabs | xpdf | 0.92a:a |
| foolabs | xpdf | 0.92b:b |
| foolabs | xpdf | 0.92c:c |
| foolabs | xpdf | 0.92d:d |
| foolabs | xpdf | 0.92e:e |
| foolabs | xpdf | 0.93a:a |
| foolabs | xpdf | 0.93b:b |
| foolabs | xpdf | 0.93c:c |
| foolabs | xpdf | 1.00a:a |
| foolabs | xpdf | 3.0.1 |
| foolabs | xpdf | 3.02pl1:pl1 |
| foolabs | xpdf | 3.02pl2:pl2 |
| foolabs | xpdf | 3.02pl3:pl3 |
| foolabs | xpdf | 3.02pl4:pl4 |
| glyphandcog | xpdfreader | 𝑥 ≤ 3.02 |
| glyphandcog | xpdfreader | 0.2 |
| glyphandcog | xpdfreader | 0.3 |
| glyphandcog | xpdfreader | 0.4 |
| glyphandcog | xpdfreader | 0.5 |
| glyphandcog | xpdfreader | 0.6 |
| glyphandcog | xpdfreader | 0.7 |
| glyphandcog | xpdfreader | 0.80 |
| glyphandcog | xpdfreader | 0.90 |
| glyphandcog | xpdfreader | 0.91 |
| glyphandcog | xpdfreader | 0.92 |
| glyphandcog | xpdfreader | 0.93 |
| glyphandcog | xpdfreader | 1.00 |
| glyphandcog | xpdfreader | 1.01 |
| glyphandcog | xpdfreader | 2.00 |
| glyphandcog | xpdfreader | 2.01 |
| glyphandcog | xpdfreader | 2.02 |
| glyphandcog | xpdfreader | 2.03 |
| glyphandcog | xpdfreader | 3.00 |
| glyphandcog | xpdfreader | 3.01 |
| glyphandcog | xpdfreader | 3.02 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Red Hat Enterprise Linux Releases
Red Hat Product | |||
|---|---|---|---|
| kpathsea |
| ||
| kpathsea-devel |
| ||
| mendexk |
| ||
| t1lib |
| ||
| t1lib-apps |
| ||
| t1lib-devel |
| ||
| t1lib-static |
| ||
| texlive |
| ||
| texlive-afm |
| ||
| texlive-context |
| ||
| texlive-dvips |
| ||
| texlive-dviutils |
| ||
| texlive-east-asian |
| ||
| texlive-latex |
| ||
| texlive-utils |
| ||
| texlive-xetex |
|
Common Weakness Enumeration
References