Buffer overflow in the readline function in util/texindex.c, as used by the (1) texi2dvi and (2) texindex commands, in texinfo 4.8 and earlier allows local users to execute arbitrary code via a crafted Texinfo file.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Texinfo | Gnu | * | 4.8 (including) |
| Texinfo | Ubuntu | dapper | * |
| Texinfo | Ubuntu | devel | * |
| Texinfo | Ubuntu | edgy | * |
| Texinfo | Ubuntu | feisty | * |
| Red Hat Enterprise Linux 2.1 | RedHat | texinfo-0:4.0b-3.el2.1 | * |
| Red Hat Enterprise Linux 3 | RedHat | texinfo-0:4.5-3.el3.1 | * |
| Red Hat Enterprise Linux 4 | RedHat | texinfo-0:4.7-5.el4.2 | * |