CVE-2011-0433
Fixed in a distro release EPSS 4%
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Products: gnome evince, t1lib, tetex
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | evince | 2.32.0-1 |
| Debian 13 | evince | 2.32.0-1 |
| Debian 5.0 | t1lib | 5.1.2-3+lenny1 |
| Debian 6.0 | t1lib | 5.1.2-3+squeeze1 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 6 | kpathsea | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | kpathsea-devel | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | mendexk | 0:2.6e-57.el6_2 |
| Red Hat Enterprise Linux 6 | t1lib | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-apps | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-debuginfo | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-devel | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-static | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | texlive | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-afm | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-context | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-debuginfo | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dvips | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dviutils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-east-asian | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-latex | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-utils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-xetex | 0:2007-57.el6_2 |