CVE-2011-0433 Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (cr...
MediumCVSS 6.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/evince(Debian:12) | < 2.32.0-1 | 2.32.0-1 |
| debian/evince(Debian:13) | < 2.32.0-1 | 2.32.0-1 |
| GNOME evince | All versions | No fix listed |
| t1lib | All versions | No fix listed |
| tetex | = 3.0 | No fix listed |
References
- Debian Security Tracker CVE-2011-0433 vendor-advisory
- RHSA-2012:1201 vendor-advisory
- 48985 third-party-advisory
- MDVSA-2012:144 vendor-advisory
- xorl.wordpress.com
- bugzilla.gnome.org
- bugzilla.redhat.com
- GLSA-201701-57 vendor-advisory
- bugs.debian.org issue-tracking