Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-docUpgrade tetex-dvipsUpgrade tetex-afmUpgrade tetex-latexUpgrade tetexUpgrade tetex-xdviUpgrade tetex-fonts | Dec 1, 2016 | May 7, 2010 |
| Debian | — | Upgrade texlive-bin | Jul 30, 2024 | May 7, 2010 |
| Gentoo Linux | — | Upgrade app-text/texlive-core. | Oct 30, 2017 | May 7, 2010 |
| Oracle_linux | — | Upgrade tetex-docUpgrade tetexUpgrade tetex-latexUpgrade tetex-fontsUpgrade tetex-dvipsUpgrade tetex-xdviUpgrade tetex-afm | Oct 16, 2024 | May 7, 2010 |
| Suse | — | Upgrade texlive-tex4htUpgrade texlive-bin-metapostUpgrade texlive-omegaUpgrade texlive-arabUpgrade texlive-bin-omegaUpgrade texlive-contextUpgrade texlive-cjkUpgrade texlive-bin-latexUpgrade texlive-latexUpgrade texlive-bin-toolsUpgrade texlive-bin-jadetexUpgrade texlive-xetexUpgrade texliveUpgrade texlive-binUpgrade texlive-bin-cjkUpgrade texlive-bin-xmltexUpgrade texlive-bin-tex4htUpgrade texlive-ppower4Upgrade texlive-develUpgrade texlive-xmltexUpgrade texlive-metapostUpgrade texlive-jadetexUpgrade texlive-bin-dviljUpgrade texlive-musictexUpgrade texlive-bin-develUpgrade texlive-toolsUpgrade texlive-dviljUpgrade texlive-latex-docUpgrade texlive-bin-musictexUpgrade texlive-docUpgrade texlive-bin-xetex | Feb 17, 2015 | Jul 9, 2013 |
| Ubuntu | — | Upgrade texlive-binariesUpgrade texlive-base-bin | Nov 8, 2024 | May 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub