CVE-2011-1552
CVE-2011-1552
Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
EPSS 10,4% · Corrección disponible
- Publicación
- Actualización
Pila tecnológica: system
Productos y versiones afectados
n/a
- Versiones
- n/a: Afectada
Sin corrección publicada
xpdf Debian:12
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.02-9
Actualiza a 3.02-9
xpdf Debian:13
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.02-9
Actualiza a 3.02-9
xpdf Debian:14
- Intervalos de versiones afectados
- ECOSYSTEM: < 3.02-9
Actualiza a 3.02-9
Fuentes originales
- http://secunia.com/advisories/43823
- http://secunia.com/advisories/48985
- http://securityreason.com/securityalert/8171
- http://www.kb.cert.org/vuls/id/MAPG-8ECL8X
- http://www.vupen.com/english/advisories/2011/0728
- http://rhn.redhat.com/errata/RHSA-2012-1201.html
- http://www.foolabs.com/xpdf/download.html
- http://www.toucan-system.com/advisories/tssa-2011-01.txt
- http://www.kb.cert.org/vuls/id/376500
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:144
- https://security.gentoo.org/glsa/201701-57
- http://securitytracker.com/id?1025266
- http://www.securityfocus.com/archive/1/517205/100/0/threaded
- https://nvd.nist.gov/vuln/detail/CVE-2011-1552