CVE-2011-1552 in Xpdf

Riassunto

di MITRE

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 31/03/2011
• Divulgazione: 31/03/2011
• Moderazione: accettato
• Voce: VDB-56979
• CPE: pronto
• CWE: CWE-119 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.10378
• KEV: no
• Attività: molto basso
• Settore: Government, Homeoffice, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-1552
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-1552
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-1552/