DSA-2388Executive Summary
| Summary | |
|---|---|
| Title | t1lib security update |
| Informations | |||
|---|---|---|---|
| Name | DSA-2388 | First vendor Publication | 2012-01-14 |
| Vendor | Debian | Last vendor Modification | 2012-01-14 |
| Severity (Vendor) | N/A | Revision | 1 |
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:H/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 7.6 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | High |
| Cvss Expoit Score | 4.9 | Authentification | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
Several vulnerabilities were discovered in t1lib, a Postscript Type 1 font rasterizer library, some of which might lead to code execution through the opening of files embedding bad fonts. CVE-2010-2642 A heap-based buffer overflow in the AFM font metrics parser potentially leads to the execution of arbitrary code. CVE-2011-0433 Another heap-based buffer overflow in the AFM font metrics parser potentially leads to the execution of arbitrary code. CVE-2011-0764 An invalid pointer dereference allows execution of arbitrary code using crafted Type 1 fonts. CVE-2011-1552 Another invalid pointer dereference results in an application crash, triggered by crafted Type 1 fonts. CVE-2011-1553 A use-after-free vulnerability results in an application crash, triggered by crafted Type 1 fonts. CVE-2011-1554 An off-by-one error results in an invalid memory read and application crash, triggered by crafted Type 1 fonts. For the oldstable distribution (lenny), this problem has been fixed in version 5.1.2-3+lenny1. For the stable distribution (squeeze), this problem has been fixed in version 5.1.2-3+squeeze1. For the testing distribution (wheezy), this problem has been fixed in version 5.1.2-3.3. For the unstable distribution (sid), this problem has been fixed in version 5.1.2-3.3. We recommend that you upgrade your t1lib packages. |
Original Source
| Url : http://www.debian.org/security/2012/dsa-2388 |
CWE : Common Weakness Enumeration
| id | Name |
|---|---|
| CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| CWE-399 | Resource Management Errors |
| CWE-189 | Numeric Errors |
| CWE-20 | Improper Input Validation |
CPE : Common Platform Enumeration
Open Source Vulnerability Database (OSVDB)
| id | Description |
|---|---|
| 74729 | Evince DVI File AFM Font Parsing Overflow |
| 74528 | t1lib PDF Type 1 Font Handling Invalid Memory Write Use-after-free DoS |
| 74527 | t1lib PDF Type 1 Font Handling Invalid Memory Location DoS |
| 74526 | t1lib PDF Type 1 Font Handling Off-by-one Overflow DoS |
| 72302 | t1lib PDF Type 1 Font Handling Invalid Pointer Code Execution |
| 70302 | Evince backend/dvi/mdvi-lib/afmparse.c token() Function Overflow |
Alert History
| Date | Informations |
|---|---|
| 2012-11-19 13:20:02 |
|
(High)
(Medium)
