Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-xdviUpgrade tetex-afmUpgrade tetex-dvipsUpgrade tetexUpgrade tetex-latexUpgrade tetex-docUpgrade tetex-fonts | Dec 1, 2016 | May 7, 2010 |
| Debian | — | Upgrade texlive-bin | Jul 30, 2024 | May 7, 2010 |
| Gentoo Linux | — | Upgrade app-text/texlive-core. | Oct 30, 2017 | May 7, 2010 |
| Suse | — | Upgrade texlive-toolsUpgrade texlive-cjkUpgrade texlive-jadetexUpgrade texlive-ppower4Upgrade texliveUpgrade texlive-nfsUpgrade texlive-metapostUpgrade texlive-contextUpgrade texlive-xmltexUpgrade te_kpathUpgrade te_contUpgrade te_ptexUpgrade te_mpostUpgrade te_omegaUpgrade texlive-xetexUpgrade texlive-tex4htUpgrade te_eplaiUpgrade texlive-develUpgrade te_dviljUpgrade texlive-latex-docUpgrade texlive-omegaUpgrade te_latexUpgrade texlive-binUpgrade texlive-latexUpgrade tetexUpgrade texlive-musictexUpgrade texlive-arabUpgrade te_amsUpgrade texlive-docUpgrade te_webUpgrade texlive-dvilj | Feb 17, 2015 | May 7, 2010 |
| Ubuntu | — | Upgrade texlive-binariesUpgrade texlive-base-bin | Nov 8, 2024 | May 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub