CVE-2007-4033
Summary
| CVE | CVE-2007-4033 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2007-07-27 22:30:00 UTC |
| Updated | 2018-10-15 21:32:00 UTC |
| Description | Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3. |
Risk And Classification
Problem Types: CWE-119
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| T1lib intT1_Env_GetCompletePath Buffer Overflow Vulnerability | BID | www.securityfocus.com | Exploit |
| Xpdf Bugs in streams and t1lib Let Remote Users Execute Arbitrary Code - SecurityTracker | SECTRACK | www.securitytracker.com | |
| Support / Security / Advisories / / MDKSA-2007:189 | Mandriva | MANDRIVA | www.mandriva.com | |
| 404 Not Found | FEDORA | fedoranews.org | |
| Support | REDHAT | www.redhat.com | |
| PHP 5.2.3 - 'PHP_gd2.dll' imagepsloadfont Local Buffer Overflow (PoC) - Windows dos Exploit | EXPLOIT-DB | www.exploit-db.com | |
| Repository / Oval Repository | OVAL | oval.cisecurity.org | |
| IBM X-Force Exchange | XF | exchange.xforce.ibmcloud.com | |
| Support / Security / Advisories / / MDKSA-2007:230 | Mandriva | MANDRIVA | www.mandriva.com | |
| PTeX: Multiple vulnerabilities — Gentoo Linux Documentation | GENTOO | security.gentoo.org | |
| Gentoo Linux Documentation -- CSTeX: Multiple vulnerabilities | GENTOO | security.gentoo.org | |
| Gentoo update for ptex - Advisories - Secunia | SECUNIA | secunia.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| [SECURITY] Fedora 7 Update: tetex-3.0-40.3.fc7 | FEDORA | www.redhat.com | |
| Gentoo Linux Documentation -- T1Lib: Buffer overflow | GENTOO | security.gentoo.org | |
| SUSE Update for Multiple Packages - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| www.bugtraq.ir/adv/t1lib.txt | MISC | www.bugtraq.ir | |
| Fedora update for tetex - Advisories - Secunia | SECUNIA | secunia.com | |
| t1lib "intT1_EnvGetCompletePath()" Buffer Overflow - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| [SECURITY] Fedora Core 6 Update: tetex-3.0-36.fc6 | FEDORA | www.redhat.com | |
| Debian update for t1lib - Advisories - Secunia | SECUNIA | secunia.com | |
| rhn.redhat.com | Red Hat Support | REDHAT | www.redhat.com | |
| Bug 303021 – CVE-2007-4033 Buffer overflow in t1lib triggerable by long filename string | MISC | bugzilla.redhat.com | |
| rPath update for tetex - Advisories - Secunia | SECUNIA | secunia.com | |
| Ubuntu update for t1lib - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| wiki.rpath.com/wiki/Advisories:rPSA-2008-0007 | CONFIRM | wiki.rpath.com | |
| SecurityFocus | BUGTRAQ | www.securityfocus.com | |
| USN-515-1: t1lib vulnerability | Ubuntu | UBUNTU | www.ubuntu.com | |
| Mandriva update for t1lib - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Gentoo Bug 193437 - media-libs/t1lib <= 5.1.1 "intT1_EnvGetCompletePath()" Buffer Overflow (CVE-2007-4033) | CONFIRM | bugs.gentoo.org | |
| Security Announcement | SUSE | www.novell.com | |
| Mandriva update for tetex - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| issues.rpath.com/browse/RPL-1972 | CONFIRM | issues.rpath.com | |
| Debian -- Security Information -- DSA-1390-1 t1lib | DEBIAN | www.debian.org | |
| Support | REDHAT | www.redhat.com | |
| Gentoo update for t1lib - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Red Hat update for tetex - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| Fedora update for t1lib - Advisories - Secunia | SECUNIA | secunia.com | Vendor Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
| Organization | Published | Contributor | Statement |
|---|---|---|---|
| Red Hat | 2007-08-01 | Mark J Cox | Not vulnerable. Versions of PHP packages as shipped with current Red Hat products are not linked with t1lib. |
There are currently no legacy QID mappings associated with this CVE.