Published: 19/11/2012 Updated: 01/07/2017

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Vulnerable Product	Search on Vulmon	Subscribe to Product
t1lib t1lib
gnome evince -
tetex tetex 3.0

Debian Bug report logs - #614668 CVE-2010-0433: Buffer overflow Package: evince; Maintainer for evince is Debian GNOME Maintainers <pkg-gnome-maintainers@listsaliothdebianorg>; Source for evince is src:evince (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Tue, 22 Feb 2011 22:03:01 UTC ...

Evince could be made to crash or run programs as your login if it opened a specially crafted file ...

t1lib could be made to crash or run programs as your login if it opened a specially crafted font file ...

Synopsis Moderate: t1lib security update Type/Severity Security Advisory: Moderate Topic Updated t1lib packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability S ...

Synopsis Moderate: texlive security update Type/Severity Security Advisory: Moderate Topic Updated texlive packages that fix multiple security issues are nowavailable for Red Hat Enterprise Linux 6The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerabili ...

Synopsis Moderate: tetex security update Type/Severity Security Advisory: Moderate Topic Updated tetex packages that fix multiple security issues are now availablefor Red Hat Enterprise Linux 5The Red Hat Security Response Team has rated this update as having moderatesecurity impact Common Vulnerability S ...

Several vulnerabilities were discovered in t1lib, a Postscript Type 1 font rasterizer library, some of which might lead to code execution through the opening of files embedding bad fonts CVE-2010-2642 A heap-based buffer overflow in the AFM font metrics parser potentially leads to the execution of arbitrary code CVE-2011-0433 Another heap-bas ...

CWE-119 http://www.mandriva.com/security/advisories?name=MDVSA-2012:144 https://bugzilla.redhat.com/show_bug.cgi?id=679732 http://rhn.redhat.com/errata/RHSA-2012-1201.html http://xorl.wordpress.com/2011/02/20/cve-2011-0433-evince-linetoken-buffer-overflow/https://bugzilla.gnome.org/show_bug.cgi?id=640923 http://secunia.com/advisories/48985 https://security.gentoo.org/glsa/201701-57 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=614668 https://nvd.nist.gov https://usn.ubuntu.com/1347-1/

CVE-2011-0433

Vulnerability Summary

Vendor Advisories

References

Vulmon Search

About

Products

Connect