CVE-2011-1554
Priority
Low
Description
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before
3.02pl6, teTeX, and other products, allows remote attackers to cause a
denial of service (application crash) via a PDF document containing a
crafted Type 1 font that triggers an invalid memory read, integer overflow,
and invalid pointer dereference, a different vulnerability than
CVE-2011-0764.
3.02pl6, teTeX, and other products, allows remote attackers to cause a
denial of service (application crash) via a PDF document containing a
crafted Type 1 font that triggers an invalid memory read, integer overflow,
and invalid pointer dereference, a different vulnerability than
CVE-2011-0764.
References
Notes
mdeslaur> xpdf in natty is now built with the poppler engine
mdeslaur> xpdf in earlier releases seems to use system t1lib
mdeslaur> xpdf in earlier releases seems to use system t1lib
Assigned-to
jdstrand
Package
| Upstream: | needs-triage |
| Ubuntu 8.04 LTS (Hardy Heron): | ignored (reached end-of-life) |
| Ubuntu 10.04 LTS (Lucid Lynx): | released (5.1.2-3ubuntu0.10.04.2) |
| Ubuntu 11.10 (Oneiric Ocelot): | released (5.1.2-3ubuntu0.11.10.2) |
| Ubuntu 12.04 LTS (Precise Pangolin): | released (5.1.2-3.4ubuntu1) |
Patches:
| Vendor: | https://bugzilla.redhat.com/show_bug.cgi?id=692909 |