CVE-2007-4033

no score yetEPSS 19%

No CVSS score yet. EPSS 19% chance of exploitation in the next 30 days.

Buffer overflow in the intT1_EnvGetCompletePath function in lib/t1lib/t1env.c in t1lib 5.1.1 allows context-dependent attackers to execute arbitrary code via a long FileName parameter. NOTE: this issue was originally reported to be in the imagepsloadfont function in php_gd2.dll in the gd (PHP_GD2) extension in PHP 5.2.3.

EPSS: 19% chance of exploitation in the next 30 days; higher than 97% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2007-07-27
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

php:php
t1lib:t1lib

References

http://bugs.gentoo.org/show_bug.cgi?id=193437
http://fedoranews.org/updates/FEDORA-2007-234.shtml
http://secunia.com/advisories/26241
http://secunia.com/advisories/26901
http://secunia.com/advisories/26981

Check your stack JSON