Skip to content
OpenAdvisories
Unscored DSA-2388-1 6 CVEs

t1lib - several

Published Jan 14, 2012 · Updated Mar 9, 2026

Fixed packages 2

ReleasePackageFixed in
Debian · 5.0 t1lib 5.1.2-3+lenny1
Debian · 6.0 t1lib 5.1.2-3+squeeze1

Vulnerabilities 6

  • Unscored —
    CVE-2010-2642 EPSS 14%

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

  • Unscored —

    Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and …

  • Unscored —
    CVE-2011-0764 EPSS 13%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunct…

  • Unscored —
    CVE-2011-1552 EPSS 10%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations…

  • Unscored —

    Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, all…

  • Unscored —

    Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote a…