CVE-2011-1552

CVE-2011-1552

Published · Updated

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 10%
exploitation probability
10%top 4% of all CVEs
observed exploitation
nono source reports it
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.
Affected products
n/a · n/a
References
http://rhn.redhat.com/errata/RHSA-2012-1201.htmlhttp://secunia.com/advisories/43823http://secunia.com/advisories/48985http://securityreason.com/securityalert/8171http://securitytracker.com/id?1025266https://security.gentoo.org/glsa/201701-57http://www.foolabs.com/xpdf/download.htmlhttp://www.kb.cert.org/vuls/id/376500http://www.kb.cert.org/vuls/id/MAPG-8ECL8Xhttp://www.mandriva.com/security/advisories?name=MDVSA-2012:144http://www.securityfocus.com/archive/1/517205/100/0/threadedhttp://www.toucan-system.com/advisories/tssa-2011-01.txt