T1
Product
T1lib
8
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add T1lib to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2011-5244 | – | Nov 19 | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other… Affected: All versions, or not specified |
| CVE-2011-0433 | – | Nov 19 | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a… Affected: All versions, or not specified |
| CVE-2011-1553 | – | Mar 31 | Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service… Affected: through 5.1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +18 more |
| CVE-2011-1552 | – | Mar 31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service… Affected: through 5.1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +18 more |
| CVE-2011-1554 | – | Mar 31 | Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash)… Affected: through 5.1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +18 more |
| CVE-2011-0764 | – | Mar 31 | t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote… Affected: through 5.1.2; 0.1; 0.2; 0.3; 0.4; 0.5; +18 more |
| CVE-2010-2642 | – | Jan 7 | Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote… Affected: 5.1.2 |
| CVE-2007-4033 | – | Jul 27 | Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName… Affected: 5.1.1 |
Showing 8