Skip to content
OpenAdvisories
Unscored RHSA-2012:1201 8 CVEs

Red Hat Security Advisory: tetex security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 16

ReleasePackageFixed in
Red Hat · RHEL 5 enterprise_linux:5::client tetex 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-afm 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-debuginfo 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-doc 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-dvips 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-fonts 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-latex 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::client tetex-xdvi 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-afm 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-debuginfo 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-doc 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-dvips 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-fonts 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-latex 0:3.0-33.15.el5_8.1
Red Hat · RHEL 5 enterprise_linux:5::server tetex-xdvi 0:3.0-33.15.el5_8.1

Vulnerabilities 8

  • Unscored —
    CVE-2010-2642 EPSS 14%

    Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t…

    evince t1lib Debian Azure Linux
  • Unscored —
    CVE-2010-3702

    The Gfx::getPos function in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly other versions up to 0.15…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2010-3704

    The FoFiType1::parse function in fofi/FoFiType1.cc in the PDF parser in xpdf before 3.02pl5, poppler 0.8.7 and possibly…

    poppler ipe xpdf Debian Ubuntu
  • Unscored —
    CVE-2011-0433

    Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and …

    evince t1lib Debian Azure Linux
  • Unscored —
    CVE-2011-0764 EPSS 13%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunct…

    xpdf Debian
  • Unscored —
    CVE-2011-1552 EPSS 10%

    t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations…

    xpdf Debian
  • Unscored —
    CVE-2011-1553

    Use-after-free vulnerability in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, all…

    xpdf Debian
  • Unscored —
    CVE-2011-1554

    Off-by-one error in t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, allows remote a…

    xpdf Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=595245
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=638960
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=666318
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=679732
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692853
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692854
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692856
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=692909
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_1201.json
  • report
    https://access.redhat.com/security/cve/CVE-2010-2642
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-2642
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-2642
  • report
    https://access.redhat.com/security/cve/CVE-2010-3702
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3702
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3702
  • report
    https://access.redhat.com/security/cve/CVE-2010-3704
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2010-3704
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2010-3704
  • report
    https://access.redhat.com/security/cve/CVE-2011-0433
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0433
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0433
  • report
    https://access.redhat.com/security/cve/CVE-2011-0764
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-0764
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-0764
  • report
    https://access.redhat.com/security/cve/CVE-2011-1552
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1552
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1552
  • report
    https://access.redhat.com/security/cve/CVE-2011-1553
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1553
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1553
  • report
    https://access.redhat.com/security/cve/CVE-2011-1554
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1554
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1554