cbcvebase.
CVE-2011-1553
published 2011-03-31

CVE-2011-1553: Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial…

medium4.3CVSS 3.1
AVNACMAuNCNINAP
Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write, a different vulnerability than CVE-2011-0764.

Affected

70 ranges· showing 25
VendorProductVersion rangeFixed in
debianpoppler< xpdf 3.02-9 (bookworm)xpdf 3.02-9 (bookworm)
debianxpdf< xpdf 3.02-9 (bookworm)xpdf 3.02-9 (bookworm)
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
foolabsxpdf
glyphandcogxpdfreader<= 3.02
glyphandcogxpdfreader
glyphandcogxpdfreader
glyphandcogxpdfreader

CVSS provenance

nvd4.3MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P
osv6.8MEDIUM