CVE-2011-1552: Buffer Overflow
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1552?
CVE-2011-1552 is classified as a denial of service vulnerability, which can lead to application crashes.
How do I fix CVE-2011-1552?
To fix CVE-2011-1552, you should upgrade to a version of t1lib that is newer than 5.1.2.
What products are affected by CVE-2011-1552?
CVE-2011-1552 affects t1lib versions 5.1.2 and earlier, as well as certain versions of Xpdf.
Can CVE-2011-1552 be exploited remotely?
Yes, CVE-2011-1552 can be exploited by remote attackers through crafted Type 1 fonts in PDF documents.
What is the impact of CVE-2011-1552 on systems?
The impact of CVE-2011-1552 is primarily a denial of service, resulting in crashes of applications that utilize vulnerable versions.