CVE Feed

    Dashboard / CVE / CVE-2007-4033

    CVE-2007-4033

    Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

    Published:Jul 26, 2007
    Last Modified:Apr 23, 2026
    EPS:Jul 27, 2007
    EPSS Score:0.25348
    CVSS Score:7.5

    Affected Products

    Vendor
    Php
    Product
    Php
    Vendor
    Redhat
    Product
    Enterprise Linux
    Vendor
    T1lib
    Product
    T1lib

    Exploits

    http://www.securityfocus.com/bid/25079http://www.securityfocus.com/bid/25079https://www.exploit-db.com/exploits/30401https://www.exploit-db.com/exploits/4227

    Related CVEs

    CVE-2026-14355 (CVSS 5.6) — In PHP versions 8.2.* before 8.2.32, 8.3.* before 8.3.32, 8.4.* before 8.4.23, 8.5.* before 8.5.8, the AES-WRA…
    CVE-2026-7263 (CVSS 6.3) — In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, DOMNode::C14N() method may process the XML data in…
    CVE-2026-6104 (CVSS 6.3) — In PHP versions 8.4.* before 8.4.21 and 8.5.* before 8.5.6, when an encoding name containing an embedded NUL b…
    CVE-2026-7258 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, some fu…
    CVE-2026-6722 (CVSS 9.5) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the SOA…
    CVE-2026-7259 (CVSS 2.1) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, a misma…
    CVE-2026-7261 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when So…
    CVE-2026-7262 (CVSS 2.9) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, when a …
    CVE-2025-14179 (CVSS 7.4) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the PDO…
    CVE-2026-7568 (CVSS 6.3) — In PHP versions 8.2.* before 8.2.31, 8.3.* before 8.3.31, 8.4.* before 8.4.21, and 8.5.* before 8.5.6, the met…

    References

    http://bugs.gentoo.org/show_bug.cgi?id=193437
    http://fedoranews.org/updates/FEDORA-2007-234.shtml
    http://secunia.com/advisories/26241
    http://secunia.com/advisories/26901
    http://secunia.com/advisories/26981
    http://secunia.com/advisories/26992
    http://secunia.com/advisories/27239
    http://secunia.com/advisories/27297
    http://secunia.com/advisories/27439
    http://secunia.com/advisories/27599
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/28345
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200710-12.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007
    http://www.bugtraq.ir/adv/t1lib.txt
    http://www.debian.org/security/2007/dsa-1390
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:189
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.novell.com/linux/security/advisories/2007_23_sr.html
    http://www.redhat.com/support/errata/RHSA-2007-1027.html
    http://www.redhat.com/support/errata/RHSA-2007-1030.html
    http://www.redhat.com/support/errata/RHSA-2007-1031.html
    http://www.securityfocus.com/archive/1/480239/100/100/threaded
    http://www.securityfocus.com/archive/1/480244/100/100/threaded
    http://www.securityfocus.com/archive/1/485823/100/0/threaded
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/25079
    http://www.securitytracker.com/id?1018905
    http://www.ubuntu.com/usn/usn-515-1
    https://bugzilla.redhat.com/show_bug.cgi?id=303021
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35620
    https://issues.rpath.com/browse/RPL-1972
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557
    https://www.exploit-db.com/exploits/4227
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html
    http://bugs.gentoo.org/show_bug.cgi?id=193437
    http://fedoranews.org/updates/FEDORA-2007-234.shtml
    http://secunia.com/advisories/26241
    http://secunia.com/advisories/26901
    http://secunia.com/advisories/26981
    http://secunia.com/advisories/26992
    http://secunia.com/advisories/27239
    http://secunia.com/advisories/27297
    http://secunia.com/advisories/27439
    http://secunia.com/advisories/27599
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/28345
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200710-12.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0007
    http://www.bugtraq.ir/adv/t1lib.txt
    http://www.debian.org/security/2007/dsa-1390
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:189
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.novell.com/linux/security/advisories/2007_23_sr.html
    http://www.redhat.com/support/errata/RHSA-2007-1027.html
    http://www.redhat.com/support/errata/RHSA-2007-1030.html
    http://www.redhat.com/support/errata/RHSA-2007-1031.html
    http://www.securityfocus.com/archive/1/480239/100/100/threaded
    http://www.securityfocus.com/archive/1/480244/100/100/threaded
    http://www.securityfocus.com/archive/1/485823/100/0/threaded
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/25079
    http://www.securitytracker.com/id?1018905
    http://www.ubuntu.com/usn/usn-515-1
    https://bugzilla.redhat.com/show_bug.cgi?id=303021
    https://exchange.xforce.ibmcloud.com/vulnerabilities/35620
    https://issues.rpath.com/browse/RPL-1972
    https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10557
    https://www.exploit-db.com/exploits/4227
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00724.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High