Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
t1lib 5.1.2 and earlier, as used in Xpdf before 3.02pl6, teTeX, and other products, uses an invalid pointer in conjunction with a dereference operation, which allows remote attackers to execute arbitrary code via a crafted Type 1 font in a PDF document, as demonstrated by testz.2184122398.pdf.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Foolabs Xpdf t1lib任意代码执行漏洞
Vulnerability Description
t1lib是一个用C编写的函数库,用于从Adobe Type 1字体生成位图。 在Xpdf 3.02pl6之前版本和其他产品中使用的t1lib 5.1.2及之前版本使用了具有解引用功能的无效指针。远程攻击者可以借助PDF文档中的特制Type 1字体,执行任意代码。该漏洞已经通过testz.2184122398.pdf文件得到证实。
CVSS Information
N/A
Vulnerability Type
N/A