CVE-2011-0433: Buffer Overflow
A heap-based buffer overflow flaw was found in the way AFM font file parser, used for rendering of DVI files, in GNOME evince document viewer and other products, processed line tokens from the given input stream. A remote attacker could provide a DVI file, with embedded specially-crafted font file, and trick the local user to open it with an application using the AFM font parser, leading to that particular application crash or, potentially, arbitrary code execution with the privileges of the user running the application. Different vulnerability than CVE-2010-2642.
Upstream bug report: [1] https://bugzilla.gnome.org/showbug.cgi?id=640923
Upstream patch: [2] https://bugzilla.gnome.org/showbug.cgi?id=640923#c1
Other sources
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-0433?
CVE-2011-0433 is considered a high severity vulnerability due to its potential for remote code execution through a heap-based buffer overflow.
How do I fix CVE-2011-0433?
To fix CVE-2011-0433, update the affected GNOME Evince, t1lib, or teTeX packages to the latest versions that contain the security patch.
What products are affected by CVE-2011-0433?
CVE-2011-0433 affects GNOME Evince, t1lib, and teTeX 3.0, particularly in their processing of DVI files with special font files.
Can CVE-2011-0433 be exploited remotely?
Yes, CVE-2011-0433 can be exploited remotely by sending a specially crafted DVI file to a vulnerable system.
What types of attacks can CVE-2011-0433 enable?
CVE-2011-0433 could enable attackers to execute arbitrary code on a victim's machine, leading to a full system compromise.