CVE-2011-0764

t1lib <= 5.1.2 - Remote Code Execution via Crafted Type 1 Font

Title source: llm
STIX 2.1

Description

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

References (18)

Core 18
Core References
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:002
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/43823
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/47347
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/48985
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/8171
US Government Resource x_refsource_confirm
http://www.kb.cert.org/vuls/id/MAPG-8ECL8X
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2011/0728
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/66208
Vendor Advisory vendor-advisory x_refsource_redhat
http://rhn.redhat.com/errata/RHSA-2012-1201.html
Patch x_refsource_confirm
http://www.foolabs.com/xpdf/download.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/46941
Vendor Advisory vendor-advisory x_refsource_ubuntu
http://www.ubuntu.com/usn/USN-1316-1
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/376500
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDVSA-2012:144
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201701-57
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1025266
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/517205/100/0/threaded

Scores

EPSS 0.1305
EPSS Percentile 95.9%

Details

CWE
CWE-20
Status published
Products (50)
foolabs/xpdf 0.5a
foolabs/xpdf 0.7a
foolabs/xpdf 0.91a
foolabs/xpdf 0.91b
foolabs/xpdf 0.91c
foolabs/xpdf 0.92a
foolabs/xpdf 0.92b
foolabs/xpdf 0.92c
foolabs/xpdf 0.92d
foolabs/xpdf 0.92e
... and 40 more
Published Mar 31, 2011
Tracked Since Feb 18, 2026