CVE-2011-5244

Impact:
Moderate
Public Date:
2011-03-04
CWE:
CWE-193
Bugzilla:
878483: CVE-2011-5244 t1lib: off-by-one errors in token and linetoken

The MITRE CVE dictionary describes this issue as:

Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.

Find out more about CVE-2011-5244 from the MITRE CVE dictionary dictionary and NIST NVD.

Statement

Not Vulnerable. This issue did not affect the version of tetex as shipped with Red Hat Enterprise Linux 5. This issue does not affect the version of t1lib and evince as shipped with Red Hat Enterprise Linux 6. Because the advisory released to fix CVE-2010-2642 completely resolved the problem without introducing this flaw.

CVSS v2 metrics

NOTE: The following CVSS v2 metrics and score provided are preliminary and subject to review.

Base Score 5.1
Base Metrics AV:N/AC:H/Au:N/C:P/I:P/A:P
Access Vector Network
Access Complexity High
Authentication None
Confidentiality Impact Partial
Integrity Impact Partial
Availability Impact Partial

Find out more about Red Hat support for the Common Vulnerability Scoring System (CVSS).

Affected Packages State

Platform Package State
Red Hat Enterprise Linux 6 t1lib Not affected
Red Hat Enterprise Linux 6 texlive Not affected
Red Hat Enterprise Linux 6 python-reportlab Not affected
Red Hat Enterprise Linux 6 libreoffice Not affected
Red Hat Enterprise Linux 6 evince Not affected
Red Hat Enterprise Linux 5 evince Not affected
Red Hat Enterprise Linux 5 openoffice.org Not affected
Red Hat Enterprise Linux 5 tetex Not affected

Last Modified

CVE description copyright © 2017, The MITRE Corporation

Close

Welcome! Check out the Getting Started with Red Hat page for quick tours and guides for common tasks.