Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-0764

medium · 6.8

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

6.8
CVSS
13.1%
EPSS (exploit prob.)
96th
EPSS percentile
2011-03-31
Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-20

Affected products

VendorProductAffected versions
t1libt1lib<= 5.1.2
t1libt1lib0.1
t1libt1lib0.2
t1libt1lib0.3
t1libt1lib0.4
t1libt1lib0.5
t1libt1lib0.6
t1libt1lib0.7
t1libt1lib0.8
t1libt1lib0.9
t1libt1lib0.9.1
t1libt1lib0.9.2
t1libt1lib1.0
t1libt1lib1.0.1
t1libt1lib1.1.0
t1libt1lib1.1.1
t1libt1lib1.2
t1libt1lib1.3
t1libt1lib1.3.1
t1libt1lib5.0.0
t1libt1lib5.0.1
t1libt1lib5.0.2
t1libt1lib5.1.0
t1libt1lib5.1.1
foolabsxpdf0.5a
foolabsxpdf0.7a
foolabsxpdf0.91a
foolabsxpdf0.91b
foolabsxpdf0.91c
foolabsxpdf0.92a
foolabsxpdf0.92b
foolabsxpdf0.92c
foolabsxpdf0.92d
foolabsxpdf0.92e
foolabsxpdf0.93a
foolabsxpdf0.93b
foolabsxpdf0.93c
foolabsxpdf1.00a
foolabsxpdf3.0.1
foolabsxpdf3.02pl1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-0764