NetSight
IP …
medium6.8

CVE-2011-0764

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which …

Impact

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Affected products

VendorProductAffected versions
T1libT1lib
through 5.1.2
Versions 0.1, 0.2, 0.3, 0.4, 0.5
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6

Weakness classification

CWE-20

References