AZL-7376
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-7376.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-7376
- Upstream
- Published
- 2011-01-07T19:00:17Z
- Modified
- 2026-04-21T04:33:59.800775Z
- Summary
- CVE-2010-2642 affecting package t1lib 5.1.2-28
- Details
-
Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.
- References