Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-0433
HistoryNov 19, 2012 - 12:10 p.m.

CVE-2011-0433

2012-11-1912:10:48
CWE-119
[email protected]
web.nvd.nist.gov
1

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Affected configurations

NVD
Node
gnomeevinceMatch-
OR
t1libt1lib
OR
tetextetexMatch3.0

Related

prion 3
cvelist 3
debiancve 3
cve 3
ubuntucve 3
nvd 2
openvas 50
veracode 2
nessus 49
cbl_mariner 2
ubuntu 3
debian 2
centos 3
osv 2
amazon 2
oraclelinux 4
fedora 4
redhat 4
gentoo 2
securityvulns 3
slackware 1
prion
prion
Heap overflow
2012-11-19 12:10:00
Code injection
2012-11-19 12:10:00
Heap overflow
2011-01-07 19:00:00
cvelist
cvelist
CVE-2011-0433
2012-11-19 11:00:00
CVE-2011-5244
2012-11-19 11:00:00
CVE-2010-2642
2011-01-07 18:00:00
debiancve
debiancve
CVE-2011-0433
2012-11-19 12:10:48
CVE-2011-5244
2012-11-19 12:10:49
CVE-2010-2642
2011-01-07 19:00:17
cve
cve
CVE-2011-0433
2012-11-19 12:10:48
CVE-2011-5244
2012-11-19 12:10:49
CVE-2010-2642
2011-01-07 19:00:17
ubuntucve
ubuntucve
CVE-2011-0433
2012-01-13 00:00:00
CVE-2011-5244
2012-11-19 00:00:00
CVE-2010-2642
2011-01-05 00:00:00
nvd
nvd
CVE-2011-5244
2012-11-19 12:10:49
CVE-2010-2642
2011-01-07 19:00:17
openvas
openvas
Mandriva Update for t1lib MDVSA-2011:016 (t1lib)
2011-01-24 00:00:00
Mandriva Update for tetex MDVSA-2011:017 (tetex)
2011-01-24 00:00:00
Mandriva Update for t1lib MDVSA-2011:016 (t1lib)
2011-01-24 00:00:00
veracode
veracode
Denial Of Service (DoS)
2020-04-10 01:07:01
Denial Of Service (DoS)
2020-04-10 01:07:01
nessus
nessus
openSUSE Security Update : t1lib (openSUSE-SU-2011:0140-1)
2011-05-05 00:00:00
Mandriva Linux Security Advisory : tetex (MDVSA-2011:017)
2011-01-28 00:00:00
openSUSE Security Update : t1lib (openSUSE-SU-2011:0140-1)
2014-06-13 00:00:00
cbl_mariner
cbl_mariner
CVE-2010-2642 affecting package t1lib 5.1.2-28
2024-07-01 09:08:36
CVE-2011-0433 affecting package t1lib 5.1.2-28
2024-07-01 09:08:36
ubuntu
ubuntu
t1lib vulnerabilities
2012-01-19 00:00:00
Evince vulnerability
2012-01-25 00:00:00
Evince vulnerabilities
2011-01-05 00:00:00
debian
debian
[SECURITY] [DSA 2388-1] t1lib security update
2012-01-15 10:25:21
[SECURITY] [DSA 2357-1] evince security update
2011-12-04 10:54:13
centos
centos
kpathsea, mendexk, texlive security update
2012-02-16 13:36:55
t1lib security update
2012-01-30 20:25:25
tetex security update
2012-08-23 23:12:26
osv
osv
t1lib - several
2012-01-14 00:00:00
evince - several
2011-12-03 00:00:00
amazon
amazon
Medium: texlive
2012-03-04 16:08:00
Medium: t1lib
2012-02-02 14:26:00
oraclelinux
oraclelinux
texlive security update
2012-02-15 00:00:00
t1lib security update
2012-01-24 00:00:00
tetex security update
2012-08-23 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: t1lib-5.1.2-9.fc16
2012-01-28 03:23:39
[SECURITY] Fedora 15 Update: t1lib-5.1.2-9.fc15
2012-01-28 03:28:44
[SECURITY] Fedora 14 Update: evince-2.32.0-3.fc14
2011-01-08 21:26:09
redhat
redhat
(RHSA-2012:0062) Moderate: t1lib security update
2012-01-24 00:00:00
(RHSA-2012:0137) Moderate: texlive security update
2012-02-15 00:00:00
(RHSA-2012:1201) Moderate: tetex security update
2012-08-23 00:00:00
gentoo
gentoo
T1Lib: : Multiple vulnerabilities
2017-01-23 00:00:00
Evince: Multiple vulnerabilities
2011-11-20 00:00:00
securityvulns
securityvulns
[USN-1035-1] Evince vulnerabilities
2011-01-07 00:00:00
evince buffer overflows
2011-01-07 00:00:00
t1lib / xpdf library multiple security vulnerabilities
2012-01-16 00:00:00
slackware
slackware
[slackware-security] t1lib
2012-08-16 06:32:38

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.086 Low

EPSS

Percentile

94.5%

JSON
Related for NVD:CVE-2011-0433
prion3cvelist3debiancve3cve3ubuntucve3nvd2openvas50veracode2nessus49cbl_mariner2ubuntu3debian2centos3osv2amazon2oraclelinux4fedora4redhat4gentoo2securityvulns3slackware1