National Cyber-Alert System

Vulnerability Summary for CVE-2007-4033

Overview

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Vendor Statments (disclaimer)

Official Statement from Red Hat (08/01/2007)

Not vulnerable. Versions of PHP packages as shipped with current Red Hat products are not linked with t1lib.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: FEDORA

Name: FEDORA-2007-750

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

External Source: FEDORA

Name: FEDORA-2007-3390

Hyperlink:https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-1972

Hyperlink:https://issues.rpath.com/browse/RPL-1972

External Source: MISC

Name: https://bugzilla.redhat.com/show_bug.cgi?id=303021

Hyperlink:https://bugzilla.redhat.com/show_bug.cgi?id=303021

External Source: XF

Name: php-imagepsloadfont-bo(35620)

Hyperlink:http://xforce.iss.net/xforce/xfdb/35620

External Source: UBUNTU

Name: USN-515-1

Hyperlink:http://www.ubuntu.com/usn/usn-515-1

External Source: SECTRACK

Name: 1018905

Hyperlink:http://www.securitytracker.com/id?1018905

External Source: BID

Name: 25079

Hyperlink:http://www.securityfocus.com/bid/25079

External Source: BUGTRAQ

Name: 20080105 rPSA-2008-0007-1 tetex tetex-afm tetex-dvips tetex-fonts tetex-latex tetex-xdvi

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/485823/100/0/threaded

External Source: BUGTRAQ

Name: 20070921 Re: [USN-515-1] t1lib vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/480244/100/100/threaded

External Source: BUGTRAQ

Name: 20070921 Re: [Full-disclosure] [USN-515-1] t1lib vulnerability

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/480239/100/100/threaded

External Source: REDHAT

Name: RHSA-2007:1031

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1031.html

External Source: REDHAT

Name: RHSA-2007:1030

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1030.html

External Source: REDHAT

Name: RHSA-2007:1027

Hyperlink:http://www.redhat.com/support/errata/RHSA-2007-1027.html

External Source: SUSE

Name: SUSE-SR:2007:023

Hyperlink:http://www.novell.com/linux/security/advisories/2007_23_sr.html

External Source: MILW0RM

Name: 4227

Hyperlink:http://www.milw0rm.com/exploits/4227

External Source: MANDRIVA

Name: MDKSA-2007:230

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:230

External Source: MANDRIVA

Name: MDKSA-2007:189

Hyperlink:http://www.mandriva.com/security/advisories?name=MDKSA-2007:189

External Source: DEBIAN

Name: DSA-1390

Hyperlink:http://www.debian.org/security/2007/dsa-1390

External Source: MISC

Name: http://www.bugtraq.ir/adv/t1lib.txt

Hyperlink:http://www.bugtraq.ir/adv/t1lib.txt

External Source: GENTOO

Name: GLSA-200711-34

Hyperlink:http://security.gentoo.org/glsa/glsa-200711-34.xml

External Source: GENTOO

Name: GLSA-200710-12

Hyperlink:http://security.gentoo.org/glsa/glsa-200710-12.xml

External Source: SECUNIA

Name: 28345

Hyperlink:http://secunia.com/advisories/28345

External Source: SECUNIA

Name: 27743

Type: Advisory

Hyperlink:http://secunia.com/advisories/27743

External Source: SECUNIA

Name: 27718

Hyperlink:http://secunia.com/advisories/27718

External Source: SECUNIA

Name: 27599

Type: Advisory

Hyperlink:http://secunia.com/advisories/27599

External Source: SECUNIA

Name: 27439

Type: Advisory

Hyperlink:http://secunia.com/advisories/27439

External Source: SECUNIA

Name: 27297

Hyperlink:http://secunia.com/advisories/27297

External Source: SECUNIA

Name: 27239

Type: Advisory

Hyperlink:http://secunia.com/advisories/27239

External Source: SECUNIA

Name: 26992

Type: Advisory

Hyperlink:http://secunia.com/advisories/26992

External Source: SECUNIA

Name: 26981

Type: Advisory

Hyperlink:http://secunia.com/advisories/26981

External Source: SECUNIA

Name: 26901

Type: Advisory

Hyperlink:http://secunia.com/advisories/26901

External Source: SECUNIA

Name: 26241

Type: Advisory

Hyperlink:http://secunia.com/advisories/26241

External Source: FEDORA

Name: FEDORA-2007-2343

Hyperlink:http://fedoranews.org/updates/FEDORA-2007-234.shtml

External Source: CONFIRM

Name: http://bugs.gentoo.org/show_bug.cgi?id=193437

Hyperlink:http://bugs.gentoo.org/show_bug.cgi?id=193437

External Source: BUGTRAQ

Name: 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/487984/100/0/threaded

External Source: CONFIRM

Name: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007

Hyperlink:http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007

External Source: GENTOO

Name: GLSA-200805-13

Hyperlink:http://security.gentoo.org/glsa/glsa-200805-13.xml

External Source: SECUNIA

Name: 30168

Hyperlink:http://secunia.com/advisories/30168