CVE-2011-0764
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an...
6.8 MediumFix available
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
Exploit likelihood
13.1%Up 3.1 points since Feb 4, 2022
What each source reports
NVD Score used
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
CVE-2011-0764- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
CVE-2011-0764- Updated
- 2026-11-02
EUVDEUVD-2011-0776 No score
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
EUVD-2011-0776- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-cw28-q96h-5px5 No score
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an...
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
GHSA-cw28-q96h-5px5- Weakness
- CWE-20
- Updated
- 2026-11-02
OSV No score
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
CVE-2011-0764- Updated
- 2026-11-02
OSVDEBIAN-CVE-2011-0764 No score
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
- Record
DEBIAN-CVE-2011-0764- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
xpdfDebian:12 |
before 3.02-9 | 3.02-9 |
xpdfDebian:13 |
before 3.02-9 | 3.02-9 |
xpdfDebian:14 |
before 3.02-9 | 3.02-9 |
t1libDebian:6.0 From an advisory covering 6 CVEs |
before 5.1.2-3+squeeze1, plus listed versions 5.1.2-35.1.2-3+lenny1 |
5.1.2-3+squeeze1 |
t1libDebian:5.0 From an advisory covering 6 CVEs |
before 5.1.2-3+lenny1, plus listed versions 5.1.2-3 |
5.1.2-3+lenny1 |
t1libRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
Show 83 moreShow less
| Package | Affected | Fixed |
|---|---|---|
t1libRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1libRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1libRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-appsRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
t1lib-staticRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:5.1.2-6.el6_2.1 | 0:5.1.2-6.el6_2.1 |
kpathseaRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::client From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texliveRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::computenode From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::server From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathseaRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texliveRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-debuginfoRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dvipsRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-latexRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-utilsRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
kpathsea-develRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
mendexkRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2.6e-57.el6_2 | 0:2.6e-57.el6_2 |
texlive-afmRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-contextRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-dviutilsRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-east-asianRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
texlive-xetexRed Hat:enterprise_linux:6::workstation From an advisory covering 6 CVEs |
before 0:2007-57.el6_2 | 0:2007-57.el6_2 |
tetexRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::client From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetexRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-afmRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-docRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-dvipsRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-fontsRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-latexRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
tetex-xdviRed Hat:enterprise_linux:5::server From an advisory covering 8 CVEs |
before 0:3.0-33.15.el5_8.1 | 0:3.0-33.15.el5_8.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2011-0764 is a medium vulnerability (CVSS 6.8) in Foolabs Xpdf, published March 31, 2011. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.1%, the 96th percentile. Fixed in xpdf 3.02-9.
References
mandriva.com/security/advisories?name=MDVSA-2012:002
secunia.com/advisories/43823
securityreason.com/securityalert/8171
kb.cert.org/vuls/id/MAPG-8ECL8X
Show 53 moreShow less
vupen.com/english/advisories/2011/0728
exchange.xforce.ibmcloud.com/vulnerabilities/66208
rhn.redhat.com/errata/RHSA-2012-1201.html
foolabs.com/xpdf/download.html
securityfocus.com/bid/46941
toucan-system.com/advisories/tssa-2011-01.txt
ubuntu.com/usn/USN-1316-1
security.gentoo.org/glsa/201701-57
securitytracker.com/id?1025266
nvd.nist.gov/vuln/detail/CVE-2011-0764
github.com/advisories/GHSA-cw28-q96h-5px5
security-tracker.debian.org/tracker/CVE-2011-0764
access.redhat.com/errata/RHSA-2012:0062
bugzilla.redhat.com/show_bug.cgi?id=666318
security.access.redhat.com/data/csaf/v2/advisories/2012/rhsa-2012_0062.json
cve.org/CVERecord?id=CVE-2010-2642