[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248364

 
 

909

 
 

195388

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

ALAS-2012-048 --- texlive, kpathsea, mendexk

ID: oval:org.secpod.oval:def:1601359Date: (C)2020-11-27   (M)2021-06-02
Class: PATCHFamily: unix




TeX Live embeds a copy of t1lib. The t1lib library allows you to rasterize bitmaps from PostScript Type 1 fonts. The following issues affect t1lib code:Two heap-based buffer overflow flaws were found in the way t1lib processed Adobe Font Metrics files. If a specially-crafted font file was opened by a TeX Live utility, it could cause the utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility. An invalid pointer dereference flaw was found in t1lib. A specially-crafted font file could, when opened, cause a TeX Live utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility. A use-after-free flaw was found in t1lib. A specially-crafted font file could, when opened, cause a TeX Live utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility. An off-by-one flaw was found in t1lib. A specially-crafted font file could, when opened, cause a TeX Live utility to crash or, potentially, execute arbitrary code with the privileges of the user running the utility. An out-of-bounds memory read flaw was found in t1lib. A specially-crafted font file could, when opened, cause a TeX Live utility to crash

Platform:
Amazon Linux AMI
Product:
texlive
kpathsea
mendexk
Reference:
ALAS-2012-48
CVE-2010-2642
CVE-2011-0764
CVE-2011-1552
CVE-2011-1553
CVE-2011-1554
CVE    5
CVE-2011-0764
CVE-2011-1554
CVE-2011-1553
CVE-2011-1552
...
CPE    2
cpe:/o:amazon:linux
cpe:/a:texlive:texlive

© SecPod Technologies