Evil-DB LogoEvil-DB
← All CVEs

CVE-2011-1552

medium · 4.3

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

4.3
CVSS
10.4%
EPSS (exploit prob.)
96th
EPSS percentile
2011-03-31
Published

AV:N/AC:M/Au:N/C:N/I:N/A:P

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
t1libt1lib<= 5.1.2
t1libt1lib0.1
t1libt1lib0.2
t1libt1lib0.3
t1libt1lib0.4
t1libt1lib0.5
t1libt1lib0.6
t1libt1lib0.7
t1libt1lib0.8
t1libt1lib0.9
t1libt1lib0.9.1
t1libt1lib0.9.2
t1libt1lib1.0
t1libt1lib1.0.1
t1libt1lib1.1.0
t1libt1lib1.1.1
t1libt1lib1.2
t1libt1lib1.3
t1libt1lib1.3.1
t1libt1lib5.0.0
t1libt1lib5.0.1
t1libt1lib5.0.2
t1libt1lib5.1.0
t1libt1lib5.1.1
foolabsxpdf0.5a
foolabsxpdf0.7a
foolabsxpdf0.91a
foolabsxpdf0.91b
foolabsxpdf0.91c
foolabsxpdf0.92a
foolabsxpdf0.92b
foolabsxpdf0.92c
foolabsxpdf0.92d
foolabsxpdf0.92e
foolabsxpdf0.93a
foolabsxpdf0.93b
foolabsxpdf0.93c
foolabsxpdf1.00a
foolabsxpdf3.0.1
foolabsxpdf3.02pl1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2011-1552