CVE-2010-0739 Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that tri...
MediumCVSS 6.8
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tug tetex | All versions | No fix listed |
| tug tex live | All versions | No fix listed |
| debian/texlive-bin(Debian:12) | < 2009-6 | 2009-6 |
| debian/texlive-bin(Debian:13) | < 2009-6 | 2009-6 |
| debian/texlive-bin(Debian:14) | < 2009-6 | 2009-6 |
References
- git.frugalware.org
- FEDORA-2010-8273 vendor-advisory
- SUSE-SR:2010:012 vendor-advisory
- SUSE-SR:2010:013 vendor-advisory
- 39390 third-party-advisory vendor-advisory
- GLSA-201206-28 vendor-advisory
- 39500 vdb-entry
- USN-937-1 vendor-advisory
- bugzilla.redhat.com
- oval:org.mitre.oval:def:11468 signature vdb-entry
- Debian Security Tracker CVE-2010-0739 vendor-advisory
- bugs.debian.org issue-tracking