T1lib

T1lib

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.8

CVE-2011-5244

  • EPSS 3.36%
  • Veröffentlicht 19.11.2012 12:10:49
  • Zuletzt bearbeitet 16.06.2026 23:36:12

Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and po...

6.8

CVE-2011-0433

  • EPSS 4.21%
  • Veröffentlicht 19.11.2012 12:10:48
  • Zuletzt bearbeitet 16.06.2026 23:27:20

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI...

4.3

CVE-2011-1552

  • EPSS 10.38%
  • Veröffentlicht 31.03.2011 23:55:00
  • Zuletzt bearbeitet 16.06.2026 23:29:36

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a dif...

4.3

CVE-2011-1553

  • EPSS 5.42%
  • Veröffentlicht 31.03.2011 23:55:00
  • Zuletzt bearbeitet 16.06.2026 23:29:36

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that trig...

4.3

CVE-2011-1554

  • EPSS 5.42%
  • Veröffentlicht 31.03.2011 23:55:00
  • Zuletzt bearbeitet 16.06.2026 23:29:37

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an inva...

6.8

CVE-2011-0764

  • EPSS 13.06%
  • Veröffentlicht 31.03.2011 22:55:02
  • Zuletzt bearbeitet 16.06.2026 23:28:01

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF docume...

7.6

CVE-2010-2642

  • EPSS 14.27%
  • Veröffentlicht 07.01.2011 19:00:17
  • Zuletzt bearbeitet 16.06.2026 23:21:08

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execut...

7.5

CVE-2007-4033

Exploit
  • EPSS 18.66%
  • Veröffentlicht 27.07.2007 22:30:00
  • Zuletzt bearbeitet 16.06.2026 22:43:16

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloa...