Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2011-1553

Опубликовано: 31 мар. 2011
Источник: debian
EPSS Низкий

Описание

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
t1libfixed5.1.2-3.5package
t1libfixed5.1.2-3+lenny1lennypackage
t1libfixed5.1.2-3+squeeze1squeezepackage
xpdffixed3.02-9package
popplernot-affectedpackage

Примечания

  • see https://bugzilla.redhat.com/show_bug.cgi?id=692909#c23

EPSS

Процентиль: 89%
0.04953
Низкий

Связанные уязвимости

ubuntu
около 14 лет назад

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

redhat
около 14 лет назад

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

nvd
около 14 лет назад

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

github
около 3 лет назад

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

oracle-oval
больше 13 лет назад

ELSA-2012-0137: texlive security update (MODERATE)

EPSS

Процентиль: 89%
0.04953
Низкий