CVE-2007-5935 Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.
MediumCVSS 6.8
EPSS 4.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tetex | All versions | No fix listed |
| tug texlive 2007 | All versions | No fix listed |
| debian/texlive-bin(Debian:12) | < 2007.dfsg.1-1 | 2007.dfsg.1-1 |
| debian/texlive-bin(Debian:13) | < 2007.dfsg.1-1 | 2007.dfsg.1-1 |
| debian/texlive-bin(Debian:14) | < 2007.dfsg.1-1 | 2007.dfsg.1-1 |
References
- bugs.debian.org exploit
- bugs.gentoo.org
- SUSE-SR:2008:001 vendor-advisory
- SUSE-SR:2008:011 vendor-advisory
- 27672 third-party-advisory vendor-advisory
- 27686 third-party-advisory vendor-advisory
- 27718 third-party-advisory vendor-advisory
- 27743 third-party-advisory vendor-advisory
- 27967 third-party-advisory vendor-advisory
- 28107 third-party-advisory vendor-advisory
- 28412 third-party-advisory vendor-advisory
- 30168 third-party-advisory vendor-advisory
- GLSA-200711-26 vendor-advisory
- GLSA-200711-34 vendor-advisory
- GLSA-200805-13 vendor-advisory
- wiki.rpath.com
- MDKSA-2007:230 vendor-advisory
- 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts mailing-list
- 26469 vdb-entry
- 1019058 vdb-entry
- ADV-2007-3896 vdb-entry
- bugzilla.redhat.com
- issues.rpath.com
- oval:org.mitre.oval:def:11311 signature vdb-entry
- USN-554-1 vendor-advisory
- FEDORA-2007-3390 vendor-advisory
- Debian Security Tracker CVE-2007-5935 vendor-advisory