Published: 31/12/2004 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 756

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote malicious users to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.

Vulnerable Product	Search on Vulmon	Subscribe to Product
latex2rtf latex2rtf 1.9.15

/* source: wwwsecurityfocuscom/bid/11233/info It is reported that LaTeX2rtf is susceptible to a remote buffer overflow vulnerability when handling malformed files This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable computer to gain unauthorized access This issue is due to a failure of the application ...

cve-2004-2167 Code to be tested: Download CentOS 64 Opertaing System Download the Latex2RTf to the Downloads folder from the below link: sourceforgenet/projects/latex2rtf/files/latex2rtf-win/1915/ cd /home/username/Downloads/ tar -xvf latex2rtf-1915targz cd latex2rtf-1915 sudo make sudo make install gcc -o exploit exploi

Home page for this github organization

Complete Dataset Sample Case in HTML CVE-2004-2167 Our Primary CVE DataSet CVE DataSet List If CVE information is not already uploaded to LinuxFlaw repo, please refer to Virtual Machine for detailed information Vmware Workstation Images Vmware Image Our Usenix Paper Understanding the Reproducibility of Crowd-reported Security Vulnerabilities If you think our dataset is of help

NVD-CWE-Other http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log http://www.securityfocus.com/bid/11233 http://www.osvdb.org/displayvuln.php?osvdb_id=10216 http://www.securitytracker.com/alerts/2004/Sep/1011367.html https://exchange.xforce.ibmcloud.com/vulnerabilities/17487 https://exchange.xforce.ibmcloud.com/vulnerabilities/17460 https://nvd.nist.gov https://www.exploit-db.com/exploits/24622/https://github.com/VulnReproduction/VulnReproduction.github.io

CVE-2004-2167

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect