CVE-2011-0764
NoneCVSS
—
EPSS
13.1%
Published
Mar 31, 2011
CISA due date
—
The record
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | xpdf | 0 | 3.02-9 |
| Debian:12 | xpdf | 0 | 3.02-9 |
| Debian:13 | xpdf | 0 | 3.02-9 |
| Debian:5.0 | t1lib | 0 | 5.1.2-3+lenny1 |
| Debian:6.0 | t1lib | 0 | 5.1.2-3+squeeze1 |
| Red Hat:enterprise_linux:5::client | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:6::client | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::client | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::server | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-xetex | 0 | 0:2007-57.el6_2 |
Related vulnerabilities
- CVE-2011-1552 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads… Also affects xpdf
- CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects xpdf
- CVE-2003-0434 Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote… Also affects xpdf
- CVE-2010-2642 Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince… Also affects t1lib
- CVE-2007-4033 Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib… Also affects tetex
- CVE-2026-113786 pypdf is a free and open-source pure-python PDF library. CWE-20
- CVE-2026-112081 A vulnerability was determined in hankcs HanLP up to 2.1.0-beta.64. CWE-20
- CVE-2026-111869 A vulnerability was identified in makeplane plane up to 1.4.2. CWE-20