Every CVE Search/ Get API key

CVE-2011-0433

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0...

6.8 MediumFix available

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Exploit likelihood

4.21%Down 0.8 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
CVE-2011-0433
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
CVE-2011-0433
Updated
2026-11-02
EUVDEUVD-2011-0458 No score

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
EUVD-2011-0458
Updated
2026-11-03
GitHub AdvisoriesGHSA-m37c-h529-2gqw No score

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0...

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
GHSA-m37c-h529-2gqw
Weakness
CWE-119
Updated
2026-11-02
OSVAZL-37048 No score

CVE-2011-0433 affecting package t1lib 5.1.2-29

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
AZL-37048
Updated
2026-11-05
OSVAZL-7377 No score

CVE-2011-0433 affecting package t1lib 5.1.2-28

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
AZL-7377
Updated
2026-11-02
OSV No score

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
CVE-2011-0433
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0433 No score

Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, a different vulnerability than CVE-2010-2642.

Record
DEBIAN-CVE-2011-0433
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
t1lib
Azure Linux:3
 through 5.1.2-29 None known
t1lib
Azure Linux:2
 through 5.1.2-28 None known
evince
Debian:12
 before 2.32.0-1
2.32.0-1
evince
Debian:13
 before 2.32.0-1
2.32.0-1
t1lib
Debian:6.0
 before 5.1.2-3+squeeze1, plus listed versions
5.1.2-35.1.2-3+lenny1
5.1.2-3+squeeze1
t1lib
Debian:5.0
 before 5.1.2-3+lenny1, plus listed versions
5.1.2-3
5.1.2-3+lenny1
t1lib
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
Show 84 moreShow less
Affected packages
PackageAffectedFixed
t1lib-static
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
kpathsea
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::client
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::computenode
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::server
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::workstation
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
tetex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1

History

History
RecordedChangedSources
factsOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-0433 is a medium vulnerability (CVSS 6.8) in Gnome Evince, published January 14, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.21%, the 91st percentile. Fixed in evince 2.32.0-1.

References

Show 41 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open