Every CVE Search/ Get API key

CVE-2011-1552

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from...

4.3 MediumFix available

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Exploit likelihood

10.4%Up 7.0 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
CVE-2011-1552
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:N/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
CVE-2011-1552
Updated
2026-11-02
EUVDEUVD-2011-1553 No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
EUVD-2011-1553
Updated
2026-11-03
GitHub AdvisoriesGHSA-fwp8-g83m-q34j No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from...

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
GHSA-fwp8-g83m-q34j
Weakness
CWE-119
Updated
2026-11-02
OSV No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
CVE-2011-1552
Updated
2026-11-02
OSVDEBIAN-CVE-2011-1552 No score

t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, reads from invalid memory locations, which allows remote attackers to cause a denial of service (application crash) via a crafted Type 1 font in a PDF document, a different vulnerability than CVE-2011-0764.

Record
DEBIAN-CVE-2011-1552
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
xpdf
Debian:12
 before 3.02-9
3.02-9
xpdf
Debian:13
 before 3.02-9
3.02-9
xpdf
Debian:14
 before 3.02-9
3.02-9
t1lib
Debian:6.0
 before 5.1.2-3+squeeze1, plus listed versions
5.1.2-35.1.2-3+lenny1
5.1.2-3+squeeze1
t1lib
Debian:5.0
 before 5.1.2-3+lenny1, plus listed versions
5.1.2-3
5.1.2-3+lenny1
t1lib
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::client
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
Show 83 moreShow less
Affected packages
PackageAffectedFixed
t1lib
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::computenode
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::server
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-apps
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-devel
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
t1lib-static
Red Hat:enterprise_linux:6::workstation
 before 0:5.1.2-6.el6_2.1
0:5.1.2-6.el6_2.1
kpathsea
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::client
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::client
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::computenode
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::computenode
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::server
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::server
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dvips
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-latex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-utils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
kpathsea-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
mendexk
Red Hat:enterprise_linux:6::workstation
 before 0:2.6e-57.el6_2
0:2.6e-57.el6_2
texlive-afm
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-context
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-dviutils
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-east-asian
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
texlive-xetex
Red Hat:enterprise_linux:6::workstation
 before 0:2007-57.el6_2
0:2007-57.el6_2
tetex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::client
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-afm
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-debuginfo
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-doc
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-dvips
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-fonts
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-latex
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1
tetex-xdvi
Red Hat:enterprise_linux:5::server
 before 0:3.0-33.15.el5_8.1
0:3.0-33.15.el5_8.1

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-1552 is a medium vulnerability (CVSS 4.3) in Foolabs Xpdf, published March 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 10.4%, the 95th percentile. Fixed in xpdf 3.02-9.

References

Show 48 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open