CVE-2010-0827
CVE-2010-0827
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
EPSS 4.4% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
texlive-bin Debian:12
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
texlive-bin Debian:13
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
texlive-bin Debian:14
- Affected ranges
- ECOSYSTEM: < 2009-6
Update to 2009-6
Original sources
- http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
- http://www.securityfocus.com/bid/39971
- http://security.gentoo.org/glsa/glsa-201206-28.xml
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
- http://security-tracker.debian.org/tracker/CVE-2010-0827
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052
- https://bugzilla.redhat.com/show_bug.cgi?id=572914
- http://www.ubuntu.com/usn/USN-937-1
- https://nvd.nist.gov/vuln/detail/CVE-2010-0827