Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade texlive-contextUpgrade kpathsea-develUpgrade kpathseaUpgrade texlive-xetexUpgrade tetex-latexUpgrade t1lib-develUpgrade texlive-dvipsUpgrade tetex-dvipsUpgrade tetex-fontsUpgrade mendexkUpgrade tetex-xdviUpgrade texliveUpgrade texlive-afmUpgrade tetex-docUpgrade texlive-utilsUpgrade tetexUpgrade t1lib-staticUpgrade texlive-east-asianUpgrade texlive-dviutilsUpgrade t1libUpgrade texlive-latexUpgrade tetex-afmUpgrade t1lib-apps | Dec 1, 2016 | Nov 19, 2012 |
| Debian | — | Upgrade evince | Jul 30, 2024 | Nov 19, 2012 |
| Gentoo Linux | — | Upgrade media-libs/t1lib. | Oct 30, 2017 | Nov 19, 2012 |
| Oracle_linux | — | Upgrade tetex-docUpgrade t1lib-develUpgrade tetex-latexUpgrade mendexkUpgrade kpathseaUpgrade t1lib-staticUpgrade texlive-dvipsUpgrade tetex-fontsUpgrade texlive-utilsUpgrade kpathsea-develUpgrade t1libUpgrade tetex-afmUpgrade texlive-afmUpgrade tetex-dvipsUpgrade texlive-east-asianUpgrade texlive-latexUpgrade texlive-dviutilsUpgrade texliveUpgrade t1lib-appsUpgrade texlive-contextUpgrade tetexUpgrade tetex-xdviUpgrade texlive-xetex | Oct 16, 2024 | Nov 19, 2012 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 30, 2011 |
| Suse | — | Upgrade t1libUpgrade t1lib-devel | Feb 17, 2015 | Jun 28, 2013 |
| Ubuntu | — | Upgrade libevdocument2Upgrade libevdocument3Upgrade libt1-5 | Nov 8, 2024 | Nov 19, 2012 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub