CVE Vulnerabilities

CVE-2010-0739

Published: Apr 16, 2010 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.

Affected Software

NameVendorStart VersionEnd Version
TetexTug**
Tex_liveTug**
Red Hat Enterprise Linux 3RedHattetex-0:1.0.7-67.19*
Red Hat Enterprise Linux 4RedHattetex-0:2.0.2-22.0.1.EL4.16*
Red Hat Enterprise Linux 5RedHattetex-0:3.0-33.8.el5_5.5*
Texlive-binUbuntuhardy*
Texlive-binUbuntuintrepid*
Texlive-binUbuntujaunty*
Texlive-binUbuntukarmic*
Texlive-binUbuntulucid*
Texlive-binUbuntuupstream*

References