Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade tetex-dvipsUpgrade tetex-afmUpgrade tetex-fontsUpgrade tetex-xdviUpgrade tetex-docUpgrade tetex-latexUpgrade tetex | Dec 1, 2016 | May 7, 2010 |
| Debian | — | Upgrade dvipng | Jul 30, 2024 | May 7, 2010 |
| Gentoo Linux | — | Upgrade dev-util/sourcenav.Upgrade app-misc/beanstalkd.Upgrade net-mail/mlmmj.Upgrade x11-libs/gtk+.Upgrade www-client/uzbl.Upgrade dev-libs/liblzw.Upgrade sys-apps/acl.Upgrade x11-misc/slim.Upgrade net-ftp/lftp.Upgrade app-arch/ncompress.Upgrade dev-lang/tk.Upgrade sys-auth/pam_krb5.Upgrade app-text/dvipng.Upgrade net-misc/iputils.Upgrade dev-perl/perl-tk.Upgrade media-gfx/splashutils.Upgrade dev-util/insight.Upgrade sys-devel/m4.Upgrade media-tv/dvbstreamer.Upgrade kde-base/kget.Upgrade app-antivirus/bitdefender-console.Upgrade kde-base/kdm.Upgrade sys-block/partimage.Upgrade x11-apps/xinit.Upgrade app-text/gv.Upgrade sys-apps/pmount.Upgrade app-arch/gzip. | Oct 30, 2017 | May 7, 2010 |
| Oracle_linux | — | Upgrade tetexUpgrade tetex-dvipsUpgrade tetex-afmUpgrade tetex-xdviUpgrade tetex-fontsUpgrade tetex-docUpgrade tetex-latex | Oct 16, 2024 | May 7, 2010 |
| Suse | — | Upgrade texlive-develUpgrade te_omegaUpgrade te_mpostUpgrade texlive-ppower4Upgrade texlive-tex4htUpgrade texlive-dviljUpgrade te_ptexUpgrade texlive-nfsUpgrade texlive-docUpgrade texlive-jadetexUpgrade texlive-latex-docUpgrade te_kpathUpgrade texlive-toolsUpgrade texlive-metapostUpgrade texlive-xmltexUpgrade texlive-arabUpgrade texlive-musictexUpgrade te_amsUpgrade texlive-xetexUpgrade texliveUpgrade te_eplaiUpgrade texlive-latexUpgrade te_latexUpgrade te_dviljUpgrade tetexUpgrade texlive-cjkUpgrade te_webUpgrade te_contUpgrade texlive-omegaUpgrade texlive-binUpgrade texlive-context | Feb 17, 2015 | May 7, 2010 |
| Ubuntu | — | Upgrade dvipng | Nov 8, 2024 | May 7, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub