Buffer overflow in Jan-Ake Larsson Dvipng
CVE-2010-0829
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
Vulnerability class: Buffer Overflow
EPSS: 0.045 (90.6th percentile) — read the EPSS interpretation.
Affected products
- Jan-ake_larsson Dvipng — versions 1.12, 1.11
- Tug Tetex
- N/a — versions n/a
Weakness classification (CWE)
References
- security@ubuntu.com (x_refsource_SECUNIA, third-party-advisory)
- security@ubuntu.com (vdb-entry, x_refsource_VUPEN)
- security@ubuntu.com (vendor-advisory, x_refsource_FEDORA)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (signature, x_refsource_OVAL, vdb-entry)
- security@ubuntu.com (vendor-advisory, x_refsource_SUSE)
- security@ubuntu.com (vendor-advisory, x_refsource_DEBIAN)
- security@ubuntu.com (x_refsource_CONFIRM, Patch)
- security@ubuntu.com (x_refsource_UBUNTU, vendor-advisory)