Vulnerability in Tug Tetex
CVE-2010-0827
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
EPSS: 0.044 (90.4th percentile) — read the EPSS interpretation.
Affected products
- Tug Tetex
- Tug Tex_live — versions 1996, 2004, 2000
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vdb-entry, x_refsource_BID)
- security@ubuntu.com (vendor-advisory, x_refsource_GENTOO)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (signature, x_refsource_OVAL, vdb-entry)
- security@ubuntu.com (x_refsource_CONFIRM)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)