Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 23

Export CSV
CVE-2011-1552

t1lib: invalid read crash via crafted Type 1 font

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

CVSS 2.0 · 4.3 Medium EPSS 10.4% KEV · Not listed
Vendors
Foolabs Glyphandcog Redhat and 1 more
Products
Xpdf Xpdfreader Enterprise Linux and 1 more
CVE-2011-1553

t1lib: Use-after-free via crafted Type 1 font

Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Foolabs Glyphandcog Redhat and 1 more
Products
Xpdf Xpdfreader Enterprise Linux and 1 more
CVE-2011-1554

t1lib: Off-by-one via crafted Type 1 font

Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory read, integer overflow, and invalid pointer dereference, a different vulnerability than CVE-2011-0764.

CVSS 2.0 · 4.3 Medium EPSS 5.4% KEV · Not listed
Vendors
Foolabs Glyphandcog Redhat and 1 more
Products
Xpdf Xpdfreader Enterprise Linux and 1 more