cbcvebase.
CVE-2011-1552
published 2011-03-31

CVE-2011-1552: t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause…

medium4.3CVSS 3.1
AVNACMAuNCNINAP
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Affected

70 ranges· showing 25
VendorProductVersion rangeFixed in
debianpoppler< xpdf 3.02-9 (bookworm)xpdf 3.02-9 (bookworm)
debianxpdf< xpdf 3.02-9 (bookworm)xpdf 3.02-9 (bookworm)
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
glyphandcogxpdfreader<= 3.02
glyphandcogxpdfreader
glyphandcogxpdfreader
glyphandcogxpdfreader

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.8MEDIUM