Red Hat Security AdvisoryRHSA-2012:0062
t1lib security update
Released 2012-01-24 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) t1lib-5.1.2-6.el6_2.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) t1lib-5.1.2-6.el6_2.1, t1lib-apps-5.1.2-6.el6_2.1, t1lib-devel-5.1.2-6.el6_2.1 +1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) t1lib-5.1.2-6.el6_2.1, t1lib-apps-5.1.2-6.el6_2.1, t1lib-devel-5.1.2-6.el6_2.1 +1
- Red Hat Enterprise Linux Server (v. 6) t1lib-5.1.2-6.el6_2.1
- Red Hat Enterprise Linux Server Optional (v. 6) t1lib-5.1.2-6.el6_2.1, t1lib-5.1.2-6.el6_2.1.ppc, t1lib-apps-5.1.2-6.el6_2.1 +3
- Red Hat Enterprise Linux Workstation (v. 6) t1lib-5.1.2-6.el6_2.1
- Red Hat Enterprise Linux Workstation Optional (v. 6) t1lib-5.1.2-6.el6_2.1, t1lib-apps-5.1.2-6.el6_2.1, t1lib-devel-5.1.2-6.el6_2.1 +1
Fixes 6 records
Priority MEDIUM 49
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (applica…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.1427 · Published 2011-01-07 · Partial fix CWE-119
Priority MEDIUM 45
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a craft…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.13055 · Published 2011-03-31 · Partial fix CWE-20
Priority LOW 37
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly ex…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0421 · Published 2012-11-19 · Partial fix CWE-119
Priority LOW 33
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.10378 · Published 2011-03-31 · Partial fix CWE-119
Priority LOW 28
Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Typ…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05417 · Published 2011-03-31 · Partial fix CWE-189
Priority LOW 28
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05417 · Published 2011-03-31 · Partial fix CWE-399
THREATIST.IORead the docs