Vulnerabilities (CVE)

Filtered by vendor Tug Subscribe
Filtered by product Tex Live
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2010-0739 1 Tug 2 Tetex, Tex Live 2017-09-19 6.8 MEDIUM N/A
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
CVE-2010-0827 1 Tug 2 Tetex, Tex Live 2017-09-19 6.8 MEDIUM N/A
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
CVE-2010-1440 1 Tug 2 Tetex, Tex Live 2017-09-19 6.8 MEDIUM N/A
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.