CVE-2011-0764
CVE-2011-0764
This page contains facts from public vulnerability sources. Check the original advisory before updating.
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
EPSS 13.1% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
Original sources
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:002
- http://secunia.com/advisories/43823
- http://secunia.com/advisories/47347
- http://secunia.com/advisories/48985
- http://securityreason.com/securityalert/8171
- http://www.kb.cert.org/vuls/id/MAPG-8ECL8X
- http://www.vupen.com/english/advisories/2011/0728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66208
- http://rhn.redhat.com/errata/RHSA-2012-1201.html
- http://www.foolabs.com/xpdf/download.html
- http://www.securityfocus.com/bid/46941
- http://www.toucan-system.com/advisories/tssa-2011-01.txt
- http://www.ubuntu.com/usn/USN-1316-1
- http://www.kb.cert.org/vuls/id/376500
- http://www.mandriva.com/security/advisories?name=MDVSA-2012:144
- https://security.gentoo.org/glsa/201701-57
- http://securitytracker.com/id?1025266
- http://www.securityfocus.com/archive/1/517205/100/0/threaded
- https://nvd.nist.gov/vuln/detail/CVE-2011-0764