CVE-2007-5940
CVE-2007-5940
This page contains facts from public vulnerability sources. Check the original advisory before updating.
feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.
EPSS 0.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
feynmf Debian:12
- Affected ranges
- ECOSYSTEM: < 1.08-1
Update to 1.08-1
feynmf Debian:13
- Affected ranges
- ECOSYSTEM: < 1.08-1
Update to 1.08-1
feynmf Debian:14
- Affected ranges
- ECOSYSTEM: < 1.08-1
Update to 1.08-1
texlive-bin Debian:12
- Affected ranges
- ECOSYSTEM: < 2005.dfsg.2-1
Update to 2005.dfsg.2-1
texlive-bin Debian:13
- Affected ranges
- ECOSYSTEM: < 2005.dfsg.2-1
Update to 2005.dfsg.2-1
texlive-bin Debian:14
- Affected ranges
- ECOSYSTEM: < 2005.dfsg.2-1
Update to 2005.dfsg.2-1
Original sources
- http://bugs.gentoo.org/show_bug.cgi?id=198231
- http://secunia.com/advisories/27739
- http://security.gentoo.org/glsa/glsa-200711-32.xml
- http://osvdb.org/42397
- http://secunia.com/advisories/27737
- http://www.vupen.com/english/advisories/2007/3974
- http://www.securityfocus.com/bid/26507
- https://nvd.nist.gov/vuln/detail/CVE-2007-5940