Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

tetex-bin vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2004-1336
The xdvizilla script in tetex-bin 2.0.2 creates temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Debian Tetex-bin 2.0.2Gentoo Linux
NA
CVE-2007-5936
dvips in teTeX and TeXlive 2007 and previous versions allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Tetex TetexTug Texlive 2007
NA
CVE-2007-5937
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and previous versions might allow user-assisted malicious users to execute arbitrary code via a crafted DVI input file.
Tug Texlive 2007Tetex Tetex
NA
CVE-2007-5935
Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and previous versions allows user-assisted malicious users to execute arbitrary code via a DVI file with a long href tag.
Tetex TetexTug Texlive 2007
NA
CVE-2002-0836
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote malicious users to execute arbitrary commands via certain print jobs, possibly involving fonts.
Mandrakesoft Mandrake Linux 8.0Mandrakesoft Mandrake Linux 8.1Redhat Linux 6.2Redhat Linux 7.1Redhat Linux 7.2Hp Secure Os 1.0Mandrakesoft Mandrake Linux 7.2Mandrakesoft Mandrake Linux 8.2Redhat Linux 7.0Redhat Linux 8.0Mandrakesoft Mandrake Linux 9.0Redhat Linux 7.3
NA
CVE-2007-0104
The Adobe PDF specification 1.3, as implemented by (a) xpdf 3.0.1 patch 2, (b) kpdf in KDE prior to 3.5.5, (c) poppler prior to 0.5.4, and other products, allows remote malicious users to have an unknown impact, possibly including denial of service (infinite loop), arbitrary code...
Xpdf Xpdf 3.0 Pl2Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Xpdf Xpdf 3.0.1 Pl1Xpdf Xpdf 3.0.1 Pl2Kde Kde 3.2Kde Kde 3.4Kde Kde 3.4.1Kde Kde 3.2.3Kde Kde 3.3Kde Kde 3.5Kde Kde 3.2.1Kde Kde 3.2.2Kde Kde 3.4.2Kde Kde 3.4.3Kde Kde 3.3.1Kde Kde 3.3.2
NA
CVE-2004-0888
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code, a different set of vulnerabilities than those identifi...
Easy Software Products Cups 1.1.10Easy Software Products Cups 1.1.12Easy Software Products Cups 1.1.19Easy Software Products Cups 1.1.19 Rc5Gnome Gpdf 0.112Gnome Gpdf 0.131Kde Koffice 1.3 Beta3Kde Kpdf 3.2Pdftohtml Pdftohtml 0.36Tetex Tetex 1.0.7Xpdf Xpdf 1.0Xpdf Xpdf 1.0aEasy Software Products Cups 1.0.4Easy Software Products Cups 1.1.15Easy Software Products Cups 1.1.16Easy Software Products Cups 1.1.4 2Easy Software Products Cups 1.1.4 3Kde Koffice 1.3.2Kde Koffice 1.3.3Pdftohtml Pdftohtml 0.33Pdftohtml Pdftohtml 0.33aTetex Tetex 2.0.2
NA
CVE-2006-1244
Unspecified vulnerability in certain versions of xpdf after 3.00, as used in various products including (a) pdfkit.framework, (b) gpdf, (c) pdftohtml, and (d) libextractor, has unknown impact and user-assisted attack vectors, possibly involving errors in (1) gmem.c, (2) SplashXPa...
Libextractor Libextractor 0.3.8Libextractor Libextractor 0.3.9Xpdf Xpdf 0.92Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 3.0Xpdf Xpdf 3.0.1Libextractor Libextractor 0.3.6Libextractor Libextractor 0.3.7Xpdf Xpdf 0.90Xpdf Xpdf 0.91Xpdf Xpdf 2.2Xpdf Xpdf 2.3Libextractor Libextractor 0.4Libextractor Libextractor 0.4.1Xpdf Xpdf 1.0aXpdf Xpdf 1.1Xpdf Xpdf 3.0.1 Pl1Xpdf Xpdf 3.0 Pl2Gnome Gpdf 2.8.2Libextractor Libextractor 0.3.11Libextractor Libextractor 0.4.2
NA
CVE-2004-1125
Buffer overflow in the Gfx::doImage function in Gfx.cc for xpdf 3.00, and other products that share code such as tetex-bin and kpdf in KDE 3.2.x to 3.2.3 and 3.3.x to 3.3.2, allows remote malicious users to cause a denial of service (application crash) and possibly execute arbitr...
Xpdf Xpdf 3.0Easy Software Products Cups 1.1.20Kde Kde 3.2.3Kde Kde 3.3.2
NA
CVE-2005-3193
Heap-based buffer overflow in the JPXStream::readCodestream function in the JPX stream parsing code (JPXStream.c) for xpdf 3.01 and previous versions, as used in products such as (1) Poppler, (2) teTeX, (3) KDE kpdf, (4) CUPS, and (5) libextractor allows user-assisted malicious u...
Xpdf Xpdf 0.93Xpdf Xpdf 1.0Xpdf Xpdf 1.0aXpdf Xpdf 3.0.1Xpdf Xpdf 3.0 Pl2Xpdf Xpdf 0.90Xpdf Xpdf 2.1Xpdf Xpdf 2.2Xpdf Xpdf 0.91Xpdf Xpdf 0.92Xpdf Xpdf 2.3Xpdf Xpdf 3.0Xpdf Xpdf 1.1Xpdf Xpdf 2.0Xpdf Xpdf 3.0 Pl3
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook