CVE:CVE-2011-1553
CNNVD:CNNVD-201103-356
t1lib是一个用C编写的函数库，用于从Adobe Type 1字体生成位图。
在Xpdf 3.02pl6之前版本和其他产品中使用的t1lib 5.1.2及之前版本中存在释放后使用漏洞。远程攻击者可以借助包含特制Type 1字体的PDF文档，导致拒绝服务（应用程序崩溃）。该文档可触发无效内存写访问。
solution:Upgrade t1lib t1lib to a higher version than 5.1.2,0.1:alpha,0.2:beta,0.3:beta,0.4:beta,0.5:beta,0.6:beta,0.7:beta,0.8:beta,0.9,0.9.1,0.9.2,1.0,1.0.1,1.1.0,1.1.1,1.2,1.3,1.3.1,5.0.0,5.0.1,5.0.2,5.1.0,5.1.1,and avoid the version (,5.1.2],0.1:alpha,0.2:beta,0.3:beta,0.4:beta,0.5:beta,0.6:beta,0.7:beta,0.8:beta,0.9,0.9.1,0.9.2,1.0,1.0.1,1.1.0,1.1.1,1.2,1.3,1.3.1,5.0.0,5.0.1,5.0.2,5.1.0,5.1.1; Upgrade foolabs xpdf to a higher version than 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,3.0.1,3.02pl1,3.02pl2,3.02pl3,3.02pl4,and avoid the version 0.5a,0.7a,0.91a,0.91b,0.91c,0.92a,0.92b,0.92c,0.92d,0.92e,0.93a,0.93b,0.93c,1.00a,3.0.1,3.02pl1,3.02pl2,3.02pl3,3.02pl4; Upgrade glyphandcog xpdfreader to a higher version than 3.02,0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01,3.02,and avoid the version (,3.02],0.2,0.3,0.4,0.5,0.6,0.7,0.80,0.90,0.91,0.92,0.93,1.00,1.01,2.00,2.01,2.02,2.03,3.00,3.01,3.02