Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
6.8
CVSSv2

CVE-2010-0827

Published: 07/05/2010 Updated: 19/09/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Subscribe to Tug

Vulnerability Summary

Integer overflow in dvips in TeX Live 2009 and previous versions, and teTeX, allows remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

tug tex live 1996

tug tex live 1998

tug tex live 2007

tug tex live 2008

tug tex live 2001

tug tex live 2002

tug tex live 1999

tug tex live 2000

tug tex live

tug tex live 2003

tug tex live 2004

tug tex live 2005

tug tetex

Vendor Advisories

Debian CVElist Bug Report Logs: texlive-bin: Fix arbitrary code execution via memory corruption
Debian Bug report logs - #580669 texlive-bin: Fix arbitrary code execution via memory corruption Package: texlive-bin; Maintainer for texlive-bin is Debian TeX Maintainers <debian-tex-maint@listsdebianorg>; Reported by: أحمد المحمودي <aelmahmoudy@sabilyorg> Date: Fri, 7 May 2010 16:06:02 UTC Severity: ...
Ubuntu Security Notice: texlive-bin vulnerabilities
It was discovered that TeX Live incorrectly handled certain long bib bibliography files If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash This issue only affected Ubuntu 804 LTS, 904 and 910 (CVE-2009-1284) ...

References

CWE-189http://www.ubuntu.com/usn/USN-937-1http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=loghttps://bugzilla.redhat.com/show_bug.cgi?id=572914http://security-tracker.debian.org/tracker/CVE-2010-0827http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.htmlhttp://www.securityfocus.com/bid/39971http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlhttp://security.gentoo.org/glsa/glsa-201206-28.xmlhttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=580669https://usn.ubuntu.com/937-1/https://nvd.nist.gov
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionSSRFbuffer overflowCVE-2023-28952CVE-2023-41822CVE-2024-27956CVE-2023-7028CVE-2024-34447CVE-2024-34460
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook