CVE-2007-4033

Published: Jul 27, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

Affected (2)

Products: Php: Php · T1lib: T1lib

1 product

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Php Php	Version 5.2.3
T1lib T1lib	Version 5.1.1

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (80)

http://bugs.gentoo.org/show_bug.cgi?id=193437

Source: cve@mitre.org

http://fedoranews.org/updates/FEDORA-2007-234.shtml

Source: cve@mitre.org

http://secunia.com/advisories/26241

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26901

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26981

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/26992

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27239

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27297

Source: cve@mitre.org

http://secunia.com/advisories/27439

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27599

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/27718

Source: cve@mitre.org

http://secunia.com/advisories/27743

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/28345

Source: cve@mitre.org

http://secunia.com/advisories/30168

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200710-12.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200711-34.xml

Source: cve@mitre.org

http://security.gentoo.org/glsa/glsa-200805-13.xml

Source: cve@mitre.org

http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007

Source: cve@mitre.org

http://www.bugtraq.ir/adv/t1lib.txt

Source: cve@mitre.org

http://www.debian.org/security/2007/dsa-1390

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:189

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDKSA-2007:230

Source: cve@mitre.org

http://www.novell.com/linux/security/advisories/2007_23_sr.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1027.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1030.html

Source: cve@mitre.org

http://www.redhat.com/support/errata/RHSA-2007-1031.html

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/480239/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/480244/100/100/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/485823/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/487984/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25079

Source: cve@mitre.org

Exploit

http://www.securitytracker.com/id?1018905

Source: cve@mitre.org

http://www.ubuntu.com/usn/usn-515-1

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=303021

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/35620

Source: cve@mitre.org

https://issues.rpath.com/browse/RPL-1972

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557

Source: cve@mitre.org

https://www.exploit-db.com/exploits/4227

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

Source: cve@mitre.org

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

Source: cve@mitre.org

http://bugs.gentoo.org/show_bug.cgi?id=193437