NVD

Id
56164  
Name
CVE-2007-4033  
Description
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-07-27  
Modified Date
2010-08-21  
Seq
2007-4033  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286084 56164 CVE-2007-4033 http://bugs.gentoo.org/show_bug.cgi?id=193437  View
286085 56164 CVE-2007-4033 FEDORA-2007-2343  View
286086 56164 CVE-2007-4033 oval:org.mitre.oval:def:10557  View
286087 56164 CVE-2007-4033 GLSA-200710-12  View
286088 56164 CVE-2007-4033 GLSA-200711-34  View
286089 56164 CVE-2007-4033 GLSA-200805-13  View
286090 56164 CVE-2007-4033 http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007  View
286091 56164 CVE-2007-4033 http://www.bugtraq.ir/adv/t1lib.txt  View
286092 56164 CVE-2007-4033 DSA-1390  View
286093 56164 CVE-2007-4033 MDKSA-2007:189  View
286094 56164 CVE-2007-4033 MDKSA-2007:230  View
286095 56164 CVE-2007-4033 4227  View
286096 56164 CVE-2007-4033 SUSE-SR:2007:023  View
286097 56164 CVE-2007-4033 RHSA-2007:1027  View
286098 56164 CVE-2007-4033 RHSA-2007:1030  View
286099 56164 CVE-2007-4033 RHSA-2007:1031  View
286100 56164 CVE-2007-4033 20070921 Re: [Full-disclosure] [USN-515-1] t1lib vulnerability  View
286101 56164 CVE-2007-4033 20070921 Re: [USN-515-1] t1lib vulnerability  View
286102 56164 CVE-2007-4033 20080105 rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi  View
286103 56164 CVE-2007-4033 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts  View
286104 56164 CVE-2007-4033 25079  View
286105 56164 CVE-2007-4033 1018905  View
286106 56164 CVE-2007-4033 USN-515-1  View
286107 56164 CVE-2007-4033 php-imagepsloadfont-bo(35620)  View
286108 56164 CVE-2007-4033 https://bugzilla.redhat.com/show_bug.cgi?id=303021  View
286109 56164 CVE-2007-4033 https://issues.rpath.com/browse/RPL-1972  View
286110 56164 CVE-2007-4033 FEDORA-2007-3390  View
286111 56164 CVE-2007-4033 FEDORA-2007-750  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52249 JVNDB-2007-000939 t1lib の intT1_EnvGetCompletePath () 関数におけるバッファオーバーフローの脆弱性 t1lib には lib/t1lib/t1env.c の intT1_EnvGetCompletePath() 関数において、FileName パラメータの取り扱いに不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4033 27388 CVE-2007-4033 56164 3.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000939.html 2007-07-27 2008-06-20 View