NVD

Id
11504  
Name
CVE-2011-5244  
Description
Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2012-11-19  
Modified Date
2013-02-25  
Seq
2011-5244  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63075 11504 CVE-2011-5244 http://git.gnome.org/browse/evince/commit/?id=439c5070022e  View
63076 11504 CVE-2011-5244 http://git.gnome.org/browse/evince/commit/?id=d4139205b010  View
63077 11504 CVE-2011-5244 [oss-security] 20110304 Re: Re: CVE request: More Evince overflows  View
63078 11504 CVE-2011-5244 evince-token-code-exec(80271)  View
63079 11504 CVE-2011-5244 https://bugzilla.gnome.org/show_bug.cgi?id=643882  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34954 JVNDB-2011-005196 複数の製品で使用される t1lib におけるサービス運用妨害 (DoS) の脆弱性 teTeX、GNOME evince、およびその他の製品で使用される可能性がある t1lib の backend/dvi/mdvi-lib/afmparse.c 内の (1) token および (2) linetoken 関数には、一つずれエラー (Off-by-One error) により、サービス運用妨害 (クラッシュ) 状態になる、および任意のコードを実行される脆弱性が存在します。 CVE-2011-5244 53151 CVE-2011-5244 11504 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005196.html 2011-03-16 2012-11-20 View