T1lib
8 CVEs across 1 T1lib products. Browse T1lib vulnerabilities, severities, and proof-of-concept exploits.
T1lib products with known CVEs
T1lib CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2011-5244 | | | 2012-11-19 | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and… |
CVE-2011-0433 | | | 2012-11-19 | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote a… |
CVE-2011-1554 | | | 2011-03-31 | Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (a… |
CVE-2011-1553 | | | 2011-03-31 | Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial o… |
CVE-2011-1552 | | | 2011-03-31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause… |
CVE-2011-0764 | | | 2011-03-31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which… |
CVE-2010-2642 | | | 2011-01-07 | Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products… |
CVE-2007-4033 | | | 2007-07-27 | Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a… |