openSUSE 10 Security Update : t1lib (t1lib-4592)

A buffer overflow in t1lib could potentially be exploited to execute arbitrary code via specially crafted files CVE-2007-4033. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update t1lib-4592. The...

Debian DSA-1390-1 : t1lib - buffer overflow

Hamid Ebadi discovered a buffer overflow in the intT1EnvGetCompletePath routine in t1lib, a Type 1 font rasterizer library. This flaw could allow an attacker to crash an application using the t1lib shared libraries, and potentially execute arbitrary code within such an application's security...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1390-1] New t1lib packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1390-1 [email protected] http://www.debian.org/security/ Noah Meyerhans October 18, 2007 http://www.debian.org/security/faq -...

DSA-1390-1 t1lib - arbitrary code execution

Bulletin has no description...

GLSA-200710-12 : T1Lib: Buffer overflow

The remote host is affected by the vulnerability described in GLSA-200710-12 T1Lib: Buffer overflow Hamid Ebadi discovered a boundary error in the intT1EnvGetCompletePath function which can lead to a buffer overflow when processing an overly long filename. Impact : A remote attacker could entice ...

T1Lib: Buffer overflow

Background T1Lib is a library for rasterizing bitmaps from Adobe Type 1 fonts. Description Hamid Ebadi discovered a boundary error in the intT1EnvGetCompletePath function which can lead to a buffer overflow when processing an overly long filename. Impact A remote attacker could entice a user to...

Mandrake Linux Security Advisory : t1lib (MDKSA-2007:189)

A buffer overflow vulnerability was discovered in t1lib due to improper bounds checking. An attacker could send specially crafted input to an application linked against t1lib which could lead to a denial of service or the execution of arbitrary code. Updated packages have been patched to prevent...

[SECURITY] Fedora 7 Update: t1lib-5.1.1-3.fc7

T1lib is a rasterizer library for Adobe Type 1 Fonts. It supports rotation and transformation, kerning underlining and antialiasing. It does not depend on X11, but does provides some special functions for X11. AFM-files can be generated from Type 1 font files and font subsetting is possible...

[USN-515-1] t1lib vulnerability

=========================================================== Ubuntu Security Notice USN-515-1 September 19, 2007 t1lib vulnerability CVE-2007-4033 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 6.06 LTS Ubuntu 6.10 Ubuntu...

t1lib library / PHP buffer overflow

Buffer overflow in intT1EnvGetCompletePath...

T1Lib Buffer Overflow Vulnerability

T1Lib Buffer Overflow Vulnerability T1Lib Vulnerability Description PHP and T1Lib Exploitation Possibility Workaround Credits T1Lib t1lib is a library written in C which implements functions for generating bitmaps from Adobe Type 1 fonts. It uses most internal parts of the Type 1 rasterizer...

USN-515-1: t1lib vulnerability

It was discovered that t1lib does not properly perform bounds checking which can result in a buffer overflow vulnerability. An attacker could send specially crafted input to applications linked against t1lib which could result in a DoS or arbitrary code execution...

T1lib intT1_Env_GetCompletePath函数远程缓冲区溢出漏洞

BUGTRAQ ID: 25079 t1lib是一个用C编写的函数库，用于从Adobe Type 1字体生成位图。 t1lib库的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞通过诱使用户处理畸形文档控制用户系统。 t1lib库的lib/t1lib/t1env.c文件中的intT1EnvGetCompletePath函数中存在缓冲区溢出，如果使用该库的应用程序处理了FileName参数中的超长字符串的话，就可以触发这个溢出，导致执行任意指令。 t1lib 5.1.1 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2007-4033

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

CVE-2007-4033

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

Buffer overflow

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

CVE-2007-4033

Buffer overflow in the intT1EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in phpgd2.dll in the gd PHPGD2...

CVE-2007-4033

CVE-2007-4033 concerns a buffer overflow in the intT1_EnvGetCompletePath function (t1lib 5.1.1, lib/t1lib/t1env.c) that can be triggered by a long FileName parameter, enabling context-dependent attackers to execute arbitrary code. Connected documents (e.g., MiracleLinux AXSA-2007-64:02) enumerate...

T1lib - intT1_Env_GetCompletePath Buffer Overflow (PoC)

T1lib - intT1EnvGetCompletePath Buffer Overflow PoC source: https://www.securityfocus.com/bid/25079/info T1lib is prone to a buffer-overflow vulnerability because the library fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers. An attacker can...