CVE-2007-4033
- State
- Published
- Severity
- Not scored
- Published
- Jul 27, 2007
- Updated
- Aug 7, 2024
- Reserved
- Jul 27, 2007
Description
Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- GLSA-200710-12vendor-advisory
- 27743third-party-advisory
- 26901third-party-advisory
- oval:org.mitre.oval:def:10557vdb-entrysignature
- php-imagepsloadfont-bo(35620)vdb-entry
- FEDORA-2007-2343vendor-advisory
- 20070921 Re: [Full-disclosure] [USN-515-1] t1lib vulnerabilitymailing-list
- DSA-1390vendor-advisory
- 27297third-party-advisory
- GLSA-200805-13vendor-advisory
- 20080105 rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvimailing-list
- http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007
- https://bugzilla.redhat.com/show_bug.cgi?id=303021
- FEDORA-2007-750vendor-advisory
- RHSA-2007:1031vendor-advisory
- MDKSA-2007:189vendor-advisory
- 4227exploit
- 30168third-party-advisory
- https://issues.rpath.com/browse/RPL-1972
- 27239third-party-advisory
- 26241third-party-advisory
- 20070921 Re: [USN-515-1] t1lib vulnerabilitymailing-list
- 25079vdb-entry
- 27718third-party-advisory
- http://www.bugtraq.ir/adv/t1lib.txt
- GLSA-200711-34vendor-advisory
- 28345third-party-advisory
- 27599third-party-advisory
- USN-515-1vendor-advisory
- 27439third-party-advisory
- 1018905vdb-entry
- FEDORA-2007-3390vendor-advisory
- 26981third-party-advisory
- RHSA-2007:1027vendor-advisory
- RHSA-2007:1030vendor-advisory
- MDKSA-2007:230vendor-advisory
- 26992third-party-advisory
- http://bugs.gentoo.org/show_bug.cgi?id=193437
- SUSE-SR:2007:023vendor-advisory
- 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fontsmailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.