CVE-2007-4033 PUBLISHED CVSS 7.5 HIGH

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

EPSS 25.35% · 96.2th percentile

Risk Scores

CVSS v2.0
7.5
EPSS Score
25.35%
96.2th percentile

Affected Products

VendorProductVersions
n/an/an/a
t1libt1lib5.1.1
phpphp5.2.3

Timeline

References

…and 21 more

Open in Interactive Console →