CVE Vulnerabilities

CVE-2010-0827

Published: May 07, 2010 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.

Affected Software

NameVendorStart VersionEnd Version
Tex_liveTug*2009 (including)
Tex_liveTug1996 (including)1996 (including)
Tex_liveTug1998 (including)1998 (including)
Tex_liveTug1999 (including)1999 (including)
Tex_liveTug2000 (including)2000 (including)
Tex_liveTug2001 (including)2001 (including)
Tex_liveTug2002 (including)2002 (including)
Tex_liveTug2003 (including)2003 (including)
Tex_liveTug2004 (including)2004 (including)
Tex_liveTug2005 (including)2005 (including)
Tex_liveTug2007 (including)2007 (including)
Tex_liveTug2008 (including)2008 (including)
Red Hat Enterprise Linux 3RedHattetex-0:1.0.7-67.19*
Red Hat Enterprise Linux 4RedHattetex-0:2.0.2-22.0.1.EL4.16*
Texlive-binUbuntuhardy*
Texlive-binUbuntuintrepid*
Texlive-binUbuntujaunty*
Texlive-binUbuntukarmic*
Texlive-binUbuntulucid*
Texlive-binUbuntuupstream*

References