CVE-2011-1554
Fixed in a distro release EPSS 5%
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.
Products: t1lib, foolabs xpdf, glyphandcog xpdfreader
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xpdf | 3.02-9 |
| Debian 13 | xpdf | 3.02-9 |
| Debian 14 | xpdf | 3.02-9 |
| Debian 5.0 | t1lib | 5.1.2-3+lenny1 |
| Debian 6.0 | t1lib | 5.1.2-3+squeeze1 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.15.el5_8.1 |
| Red Hat Enterprise Linux 6 | kpathsea | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | kpathsea-devel | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | mendexk | 0:2.6e-57.el6_2 |
| Red Hat Enterprise Linux 6 | t1lib | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-apps | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-debuginfo | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-devel | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | t1lib-static | 0:5.1.2-6.el6_2.1 |
| Red Hat Enterprise Linux 6 | texlive | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-afm | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-context | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-debuginfo | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dvips | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-dviutils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-east-asian | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-latex | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-utils | 0:2007-57.el6_2 |
| Red Hat Enterprise Linux 6 | texlive-xetex | 0:2007-57.el6_2 |