CVE-2011-1554: Undefined Security Weakness

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service application crash via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid...

CVE-2011-0764: Improper Input Validation

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf...

CVE-2011-1552

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service application crash via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764...

TSSA-2011-01 xpdf : multiple vulnerabilities allow remote code execution

--------------------------------------------------------------------------- xpdf : multiple vulnerabilities in t1lib allow arbitrary remote code execution - --------------------------------------------------------------------------- - -- Vulnerability Summary: Date Published: 28/03/2011 Last...

Foolabs Xpdf contains a denial of service vulnerability

Overview Foolabs Xpdf contains a denial of service vulnerability caused by the t1lib library incorrectly parsing Type 1 fonts. Description According to Foolabs: Xpdf is an open source viewer for Portable Document Format PDF files. These are sometimes also called 'Acrobat' files, from the name of...

SuSE 11.1 Security Update : t1lib (SAT Patch Number 3789)

A heap overflow in the AFM font parser of DVI files has been fixed in t1lib. CVE-2010-2642 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself i...

Mandriva Linux Security Advisory : t1lib (MDVSA-2011:016)

It was discovered that t1lib suffered from the same vulnerability as previousely addressed in Evince with MDVSA-2011:005 CVE-2010-2642. As a precaution t1lib has been patched to address this flaw. Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to...

Mandriva Update for t1lib MDVSA-2011:016 (t1lib)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Mandriva Update for t1lib MDVSA-2011:016 (t1lib)

Check for the Version of t1lib OpenVAS Vulnerability Test Mandriva Update for t1lib MDVSA-2011:016 t1lib Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Heap overflow

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunctio...

CVE-2010-2642

CVE-2010-2642 describes a heap-based buffer overflow in the AFM font parser of the dvi-backend used by Evince (2.32 and earlier), teTeX 3.0, and t1lib 5.1.2, among others. The vulnerability is triggered by a crafted font in a DVI file processed by the thumbnailer, potentially resulting in a denia...

PT-2011-1033

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 versions 2007 texlive-dviutils-2007 versions 2007 texlive-context-2007 versions 2007 texlive-utils-2007 versions 2007 texlive-2007 versions 2007 t1lib versions 5.1.2 and earlier texlive-xetex-2007 versions 2007...

PT-2011-1032

Name of the Vulnerable Software and Affected Versions t1lib versions 5.1.2 and earlier texlive-debuginfo-2007 version 2007 texlive-dviutils-2007 version 2007 texlive-context-2007 version 2007 texlive-utils-2007 version 2007 texlive-2007 version 2007 texlive-xetex-2007 version 2007...

PT-2011-1031

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 versions 2007 texlive-dviutils-2007 versions 2007 texlive-context-2007 versions 2007 texlive-utils-2007 versions 2007 texlive-2007 versions 2007 t1lib versions 5.1.2 and earlier texlive-xetex-2007 versions 2007...

PT-2011-1034

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 versions 2007 texlive-dviutils-2007 versions 2007 texlive-context-2007 versions 2007 texlive-utils-2007 versions 2007 texlive-2007 versions 2007 t1lib versions 5.1.2 and earlier texlive-xetex-2007 versions 2007...

PT-2011-1030

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 version 2007 texlive-dviutils-2007 version 2007 texlive-context-2007 version 2007 texlive-utils-2007 version 2007 texlive-2007 version 2007 t1lib affected versions not specified texlive-xetex-2007 version 2007 mendexk-2....

t1lib: Heap based buffer overflow in DVI file AFM font parser

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunctio...

PT-2011-1029

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 versions 2007 texlive-dviutils-2007 versions 2007 texlive-context-2007 versions 2007 texlive-utils-2007 versions 2007 texlive-2007 versions 2007 t1lib versions 5.1.2 and earlier texlive-dvips-2007 versions 2007...

SLES10: Security update for t1lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: t1lib t1lib-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for t1lib

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: t1lib t1lib-devel More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...