CVE-2007-5936 dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which ca...
LowCVSS 3.6
EPSS 0.40%
- Published
- Updated
- Exploit status
- No public exploit known
Description
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tetex | All versions | No fix listed |
| tug texlive 2007 | All versions | No fix listed |
| debian/texlive-bin(Debian:12) | < 2007-13 | 2007-13 |
| debian/texlive-bin(Debian:13) | < 2007-13 | 2007-13 |
| debian/texlive-bin(Debian:14) | < 2007-13 | 2007-13 |
References
- bugs.gentoo.org
- bugs.gentoo.org
- SUSE-SR:2008:001 vendor-advisory
- SUSE-SR:2008:011 vendor-advisory
- 42238 vdb-entry
- 27672 third-party-advisory vendor-advisory
- 27686 third-party-advisory vendor-advisory
- 27718 third-party-advisory vendor-advisory
- 27743 third-party-advisory vendor-advisory
- 27967 third-party-advisory vendor-advisory
- 28107 third-party-advisory vendor-advisory
- 28412 third-party-advisory vendor-advisory
- 30168 third-party-advisory vendor-advisory
- GLSA-200711-26 vendor-advisory
- GLSA-200711-34 vendor-advisory
- GLSA-200805-13 vendor-advisory
- wiki.rpath.com
- MDKSA-2007:230 vendor-advisory
- 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts mailing-list
- 26469 vdb-entry
- 1019058 vdb-entry
- ADV-2007-3896 vdb-entry
- bugzilla.redhat.com
- issues.rpath.com
- USN-554-1 vendor-advisory
- FEDORA-2007-3390 vendor-advisory
- Debian Security Tracker CVE-2007-5936 vendor-advisory