{"id":"CVE-2011-5244","aliases":["AZL-37049","AZL-7378","DEBIAN-CVE-2011-5244","DSA-2357-1","EUVD-2011-5144","GHSA-2jx2-275x-4xpq"],"status":"published","title":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib...","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03355,"percentile":0.88773,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-189"],"published":"2011-12-03T00:00:00Z","modified":"2026-11-05T05:36:30Z","fixes":[{"ecosystem":"Debian:12","package":"evince","fixed_in":["2.32.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"evince","fixed_in":["2.32.0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:3","package":"t1lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.1.2-29"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"t1lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"5.1.2-28"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"evince","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"evince","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.32.0-1"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"evince","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.2-4~lenny2"}]}],"versions":["2.22.2-4~lenny1"],"bundled":5}],"products":[{"vendor":"gnome","product":"evince"},{"vendor":"t1lib","product":"t1lib"},{"vendor":"tetex","product":"tetex"}],"references":[{"url":"https://bugzilla.gnome.org/show_bug.cgi?id=643882","tags":["x_refsource_CONFIRM","x_transferred","report"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/80271","tags":["vdb-entry","x_refsource_XF","x_transferred","web"]},{"url":"http://www.openwall.com/lists/oss-security/2011/03/04/21","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"http://git.gnome.org/browse/evince/commit/?id=d4139205b010","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/201701-57","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","advisory"]},{"url":"http://git.gnome.org/browse/evince/commit/?id=439c5070022e","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-5244","tags":["web"]},{"url":"https://github.com/advisories/GHSA-2jx2-275x-4xpq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2011-5244","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-5244","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T11:00:00Z","modified":"2024-08-07T00:30:46.795Z","updated_at":"2026-11-02T14:35:36.252742Z"}],"euvd":[{"id":"EUVD-2011-5144","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T11:00:00Z","modified":"2024-08-07T00:30:46Z","updated_at":"2026-11-03T01:39:47.222761Z"}],"ghsa":[{"id":"GHSA-2jx2-275x-4xpq","title":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib...","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2022-05-17T01:50:23Z","modified":"2023-02-03T05:05:29Z","updated_at":"2026-11-02T14:53:45.336505Z"}],"nvd":[{"id":"CVE-2011-5244","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T12:10:49.337Z","modified":"2026-06-16T23:36:12.887Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-189"],"updated_at":"2026-11-02T14:02:12.639283Z"}],"osv":[{"id":"AZL-37049","title":"CVE-2011-5244 affecting package t1lib 5.1.2-29","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T12:10:49Z","modified":"2026-11-05T05:36:30Z","updated_at":"2026-11-05T16:41:19.751978Z"},{"id":"AZL-7378","title":"CVE-2011-5244 affecting package t1lib 5.1.2-28","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T12:10:49Z","modified":"2026-04-21T04:33:59.783448Z","updated_at":"2026-11-02T15:28:09.474476Z"},{"id":"CVE-2011-5244","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T12:10:49Z","modified":"2026-04-10T03:44:12.104187Z","updated_at":"2026-11-02T15:43:58.279353Z"},{"id":"DEBIAN-CVE-2011-5244","description":"Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other products, allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a DVI file containing a crafted Adobe Font Metrics (AFM) file, different vulnerabilities than CVE-2010-2642 and CVE-2011-0433.","status":"published","published":"2012-11-19T12:10:49.337Z","modified":"2026-10-23T17:47:48.912419691Z","updated_at":"2026-11-02T15:45:24.92418Z"},{"id":"DSA-2357-1","title":"evince - several","status":"published","published":"2011-12-03T00:00:00Z","modified":"2026-03-09T01:18:37.432534Z","updated_at":"2026-11-02T15:46:15.108335Z"}]}}