Vulnerability in Tug Tetex
CVE-2010-1440
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
EPSS: 0.034 (87.7th percentile) — read the EPSS interpretation.
Affected products
- Tug Tetex
- Tug Tex_live — versions 1996, 2004, 2000
- N/a — versions n/a
Weakness classification (CWE)
References
- secalert@redhat.com (vendor-advisory, x_refsource_GENTOO)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (x_refsource_CONFIRM)
- secalert@redhat.com (vendor-advisory, x_refsource_SUSE)
- secalert@redhat.com (vendor-advisory, x_refsource_FEDORA)
- secalert@redhat.com (signature, x_refsource_OVAL, vdb-entry)
- secalert@redhat.com (x_refsource_UBUNTU, vendor-advisory)