CVE-2010-0739
CVE-2010-0739
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
EPSS 4.9% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
texlive-bin Debian:12
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
texlive-bin Debian:13
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
texlive-bin Debian:14
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
Original sources
- http://www.securityfocus.com/bid/39500
- http://security.gentoo.org/glsa/glsa-201206-28.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11468
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html
- http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-stable.git%3Ba=blob%3Bf=source/xapps-extra/tetex/texlive-CVE-2010-0739-int-overflow.patch
- https://bugzilla.redhat.com/show_bug.cgi?id=572941
- http://www.ubuntu.com/usn/USN-937-1
- http://secunia.com/advisories/39390
- https://nvd.nist.gov/vuln/detail/CVE-2010-0739