Описание
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| evince | fixed | 2.32.0-1 | package | |
| evince | fixed | 2.30.3-2+squeeze1 | squeeze | package |
| vftool | fixed | 2.0alpha-4.1 | package | |
| vftool | fixed | 2.0alpha-4+squeeze1 | squeeze | package |
| vftool | fixed | 2.0alpha-3+lenny1 | lenny | package |
| t1lib | fixed | 5.1.2-3.5 | package | |
| t1lib | fixed | 5.1.2-3+lenny1 | lenny | package |
| t1lib | fixed | 5.1.2-3+squeeze1 | squeeze | package |
Примечания
https://bugzilla.gnome.org/show_bug.cgi?id=640923
vuln source file is lib/t1lib/parseAFM.c, which differs slightly from evince's afmparse.c in the affected areas but it is indeed affected
https://bugzilla.gnome.org/show_bug.cgi?id=640923
https://bugzilla.gnome.org/show_bug.cgi?id=643882
EPSS
Связанные уязвимости
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
EPSS