← back
CVE-2007-4033

CVE-2007-4033

EPSS 18.7%
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/30401unverifiedcve_referencewww.exploit-db.com/exploits/4227unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bugs.gentoo.org/show_bug.cgi?id=193437http://fedoranews.org/updates/FEDORA-2007-234.shtmlhttps://bugzilla.redhat.com/show_bug.cgi?id=303021http://secunia.com/advisories/26241http://secunia.com/advisories/26901http://secunia.com/advisories/26981http://secunia.com/advisories/26992http://secunia.com/advisories/27239http://secunia.com/advisories/27297http://secunia.com/advisories/27439http://secunia.com/advisories/27599http://secunia.com/advisories/27718