CVE-2011-0764

CVSS V2 Medium 6.8 CVSS V3 None
Description
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
Overview
  • CVE ID
  • CVE-2011-0764
  • Assigner
  • cret@cert.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2011-03-31T22:55:02
  • Last Modified Date
  • 2019-03-06T16:30:38
Weakness Enumerations
CWE URL
CWE-20 http://cwe.mitre.org/data/definitions/20.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:t1lib:t1lib:*:*:*:*:*:*:*:* 1 OR 5.1.2
cpe:2.3:a:t1lib:t1lib:0.1:alpha:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.2:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.3:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.4:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.5:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.6:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.7:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.8:beta:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.9:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.9.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:0.9.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:1.3.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:5.0.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:5.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:5.0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:5.1.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:t1lib:t1lib:5.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.5a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.7a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.91a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.91b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.91c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.92a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.92b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.92c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.92d:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.92e:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.93a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.93b:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:0.93c:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:1.00a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:3.0.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:3.02pl1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:3.02pl2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:3.02pl3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:foolabs:xpdf:3.02pl4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:*:*:*:*:*:*:*:* 1 OR 3.02
cpe:2.3:a:glyphandcog:xpdfreader:0.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.5:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.6:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.7:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.80:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.90:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.91:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.92:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:0.93:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:1.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:1.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:2.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:2.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:2.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:2.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:3.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:3.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:glyphandcog:xpdfreader:3.02:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:M/Au:N/C:P/I:P/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • MEDIUM
  • Authentication
  • NONE
  • Confidentiality Impact
  • PARTIAL
  • Integrity Impact
  • PARTIAL
  • Availability Impact
  • PARTIAL
  • Base Score
  • 6.8
  • Severity
  • MEDIUM
  • Exploitability Score
  • 8.6
  • Impact Score
  • 6.4
References
Reference URL Reference Tags
http://www.kb.cert.org/vuls/id/376500 US Government Resource
http://www.foolabs.com/xpdf/download.html Patch
http://secunia.com/advisories/43823 Vendor Advisory
http://www.vupen.com/english/advisories/2011/0728 Vendor Advisory
http://www.toucan-system.com/advisories/tssa-2011-01.txt
http://www.securityfocus.com/bid/46941
http://www.kb.cert.org/vuls/id/MAPG-8ECL8X US Government Resource
http://securitytracker.com/id?1025266
http://securityreason.com/securityalert/8171
http://www.mandriva.com/security/advisories?name=MDVSA-2012:002
http://www.ubuntu.com/usn/USN-1316-1
http://secunia.com/advisories/47347
http://rhn.redhat.com/errata/RHSA-2012-1201.html
http://www.mandriva.com/security/advisories?name=MDVSA-2012:144
http://secunia.com/advisories/48985
https://security.gentoo.org/glsa/201701-57
https://exchange.xforce.ibmcloud.com/vulnerabilities/66208
http://www.securityfocus.com/archive/1/517205/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2011-0764
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0764
History
Created Old Value New Value Data Type Notes
2022-05-10 07:56:42 Added to TrackCVE