CVE-2011-1552
NoneCVSS
—
EPSS
10.4%
Published
Mar 31, 2011
CISA due date
—
The record
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | xpdf | 0 | 3.02-9 |
| Debian:12 | xpdf | 0 | 3.02-9 |
| Debian:13 | xpdf | 0 | 3.02-9 |
| Debian:5.0 | t1lib | 0 | 5.1.2-3+lenny1 |
| Debian:6.0 | t1lib | 0 | 5.1.2-3+squeeze1 |
| Red Hat:enterprise_linux:5::client | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::client | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-afm | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-debuginfo | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-doc | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-dvips | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-fonts | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-latex | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:5::server | tetex-xdvi | 0 | 0:3.0-33.15.el5_8.1 |
| Red Hat:enterprise_linux:6::client | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::client | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::client | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::client | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::computenode | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::computenode | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::server | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::server | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::server | texlive-xetex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | kpathsea | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | kpathsea-devel | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | mendexk | 0 | 0:2.6e-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | t1lib | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-apps | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-debuginfo | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-devel | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | t1lib-static | 0 | 0:5.1.2-6.el6_2.1 |
| Red Hat:enterprise_linux:6::workstation | texlive | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-afm | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-context | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-debuginfo | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dvips | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-dviutils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-east-asian | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-latex | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-utils | 0 | 0:2007-57.el6_2 |
| Red Hat:enterprise_linux:6::workstation | texlive-xetex | 0 | 0:2007-57.el6_2 |
Related vulnerabilities
- CVE-2011-0764 t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses… Also affects xpdf
- CVE-2009-3608 Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before… Also affects xpdf
- CVE-2003-0434 Various PDF viewers including (1) Adobe Acrobat 5.06 and (2) Xpdf 1.01 allow remote… Also affects xpdf
- CVE-2010-2642 Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince… Also affects t1lib
- CVE-2007-4033 Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib… Also affects tetex
- CVE-2026-112108 A vulnerability was determined in ztxz16 fastllm up to 0.1.8.2. CWE-119
- CVE-2026-112073 A vulnerability was identified in Tencent ncnn up to 44b02dabdcf97499281a4692ebd65bad73dc… CWE-119
- CVE-2026-90831 A vulnerability was detected in GNU Binutils 2.47. CWE-119