Published: 07/05/2010 Updated: 13/02/2023

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 605

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and previous versions, and teTeX, allow remote malicious users to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

Vulnerable Product	Search on Vulmon	Subscribe to Product
tug tex live 2007
tug tetex
tug tex live 2008
tug tex live 2004
tug tex live
tug tex live 2002
tug tex live 1996
tug tex live 2001
tug tex live 1999
tug tex live 2005
tug tex live 1998
tug tex live 2000
tug tex live 2003

It was discovered that TeX Live incorrectly handled certain long bib bibliography files If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash This issue only affected Ubuntu 804 LTS, 904 and 910 (CVE-2009-1284) ...

Debian Bug report logs - #580668 texlive-bin: Fix arbitrary code execution via integer overflow Package: texlive-bin; Maintainer for texlive-bin is Debian TeX Maintainers <debian-tex-maint@listsdebianorg>; Reported by: أحمد المحمودي <aelmahmoudy@sabilyorg> Date: Fri, 7 May 2010 16:03:01 UTC Severity: ...

Debian Bug report logs - #580669 texlive-bin: Fix arbitrary code execution via memory corruption Package: texlive-bin; Maintainer for texlive-bin is Debian TeX Maintainers <debian-tex-maint@listsdebianorg>; Reported by: أحمد المحمودي <aelmahmoudy@sabilyorg> Date: Fri, 7 May 2010 16:06:02 UTC Severity: ...

CWE-189 https://bugzilla.redhat.com/show_bug.cgi?id=586819 http://www.ubuntu.com/usn/USN-937-1 http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html http://security.gentoo.org/glsa/glsa-201206-28.xml https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10068 https://usn.ubuntu.com/937-1/https://nvd.nist.gov

CVE-2010-1440

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect