CVE-2007-5937 Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
MediumCVSS 6.8
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tetex | All versions | No fix listed |
| tug texlive 2007 | All versions | No fix listed |
| debian/texlive-bin(Debian:12) | < 2007-13 | 2007-13 |
| debian/texlive-bin(Debian:13) | < 2007-13 | 2007-13 |
| debian/texlive-bin(Debian:14) | < 2007-13 | 2007-13 |
References
- bugs.gentoo.org
- bugs.gentoo.org
- SUSE-SR:2008:001 vendor-advisory
- SUSE-SR:2008:011 vendor-advisory
- 27672 third-party-advisory vendor-advisory
- 27686 third-party-advisory vendor-advisory
- 27718 third-party-advisory vendor-advisory
- 27743 third-party-advisory vendor-advisory
- 27967 third-party-advisory vendor-advisory
- 28107 third-party-advisory vendor-advisory
- 28412 third-party-advisory vendor-advisory
- 30168 third-party-advisory vendor-advisory
- GLSA-200711-26 vendor-advisory
- GLSA-200711-34 vendor-advisory
- GLSA-200805-13 vendor-advisory
- wiki.rpath.com
- MDKSA-2007:230 vendor-advisory
- 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts mailing-list
- 26469 vdb-entry
- 1019058 vdb-entry
- ADV-2007-3896 vdb-entry vendor-advisory
- bugzilla.redhat.com
- issues.rpath.com
- USN-554-1 vendor-advisory
- FEDORA-2007-3390 vendor-advisory
- Debian Security Tracker CVE-2007-5937 vendor-advisory