Every CVE Search/ Get API key

CVE-2011-0764

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an...

6.8 MediumFix available

CVE-2011-0764 is a medium vulnerability (CVSS 6.8) in Foolabs Xpdf, published March 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. Fixed in xpdf 3.02-9.

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Exploit likelihood

13.1%Up 3.1 points since Jun 1, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
CVE-2011-0764
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-20
Updated
2026-11-02
CVE List No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
CVE-2011-0764
Updated
2026-11-02
EUVDEUVD-2011-0776 No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
EUVD-2011-0776
Updated
2026-11-03
GitHub AdvisoriesGHSA-cw28-q96h-5px5 No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an...

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
GHSA-cw28-q96h-5px5
Weakness
CWE-20
Updated
2026-11-02
OSV No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
CVE-2011-0764
Updated
2026-11-02
OSVDEBIAN-CVE-2011-0764 No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.

Record
DEBIAN-CVE-2011-0764
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xpdf
Debian:12
 before 3.02-9
3.02-9
xpdf
Debian:13
 before 3.02-9
3.02-9
xpdf
Debian:14
 before 3.02-9
3.02-9
t1lib
Debian:6.0
 before 5.1.2-3+squeeze1, plus listed versions
5.1.2-35.1.2-3+lenny1
5.1.2-3+squeeze1
t1lib
Debian:5.0
 before 5.1.2-3+lenny1, plus listed versions
5.1.2-3
5.1.2-3+lenny1
t1lib
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
Show 83 moreShow less
Affected packages
PackageAffectedFixed
t1lib
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
kpathsea
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::client
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::computenode
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::server
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::workstation
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
tetex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 53 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open