CVE-2018-17407

Synopsis Moderate: texlive security update Type/Severity Security Advisory: Moderate Topic An update for texlive is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score, wh ...

Debian Bug report logs - #909317 texlive-bin: CVE-2018-17407: buffer overflow (DSA-4299-1) Package: src:texlive-bin; Maintainer for src:texlive-bin is Debian TeX Maintainers <debian-tex-maint@listsdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Fri, 21 Sep 2018 14:51:01 UTC Severity: grave T ...

Several security issues were fixed in Tex Live ...

Several security issues were fixed in Tex Live ...

Nick Roessler from the University of Pennsylvania has found a buffer overflow in texlive-bin, the executables for TexLive, the popular distribution of TeX document production system This buffer overflow can be used for arbitrary code execution by crafting a special type1 font (pfb) and provide it to users running pdf(la)tex, dvips or luatex in a ...

An issue was discovered in t1_check_unusual_charstring functions in writet1c files in TeX Live before 2018-09-21 A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex (CVE-2018-17407) ...

An issue was discovered in t1_check_unusual_charstring functions in writet1c files in TeX Live before 2018-09-21 A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex (CVE-2018-17407) ...

An issue was discovered in t1_check_unusual_charstring functions in writet1c files in TeX Live before 2018-09-21 A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex ...

An issue was discovered in t1_check_unusual_charstring functions in writet1c files in TeX Live before 2018-09-21 A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex ...