CVE Vulnerabilities

CVE-2010-1440

Published: May 07, 2010 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

Affected Software

NameVendorStart VersionEnd Version
TetexTug**
Tex_liveTug*2009 (including)
Tex_liveTug1996 (including)1996 (including)
Tex_liveTug1998 (including)1998 (including)
Tex_liveTug1999 (including)1999 (including)
Tex_liveTug2000 (including)2000 (including)
Tex_liveTug2001 (including)2001 (including)
Tex_liveTug2002 (including)2002 (including)
Tex_liveTug2003 (including)2003 (including)
Tex_liveTug2004 (including)2004 (including)
Tex_liveTug2005 (including)2005 (including)
Tex_liveTug2007 (including)2007 (including)
Tex_liveTug2008 (including)2008 (including)
Red Hat Enterprise Linux 3RedHattetex-0:1.0.7-67.19*
Red Hat Enterprise Linux 4RedHattetex-0:2.0.2-22.0.1.EL4.16*
Red Hat Enterprise Linux 5RedHattetex-0:3.0-33.8.el5_5.5*
Texlive-binUbuntuhardy*
Texlive-binUbuntuintrepid*
Texlive-binUbuntujaunty*
Texlive-binUbuntukarmic*
Texlive-binUbuntulucid*
Texlive-binUbuntuupstream*

References