NetSight
IP …
medium4.3

CVE-2011-1552

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause…

Impact

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Affected products

VendorProductAffected versions
T1libT1lib
through 5.1.2
Versions 0.1, 0.2, 0.3, 0.4, 0.5
FoolabsXpdf
Versions 0.5a, 0.7a, 0.91a, 0.91b, 0.91c, 0.92a
GlyphandcogXpdfreader
through 3.02
Versions 0.2, 0.3, 0.4, 0.5, 0.6

Weakness classification

CWE-119

References