Vulnerabilities > TUG

DATE CVE VULNERABILITY TITLE RISK
2010-05-07 CVE-2010-0827 Numeric Errors vulnerability in TUG Tetex and TEX Live
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
network
tug CWE-189
6.8
2007-11-13 CVE-2007-5940 Link Following vulnerability in TUG Texlive 2007
feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.
local
low complexity
tug CWE-59
4.6
2007-11-13 CVE-2007-5937 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
network
tetex tug CWE-119
6.8
2007-11-13 CVE-2007-5936 Permissions, Privileges, and Access Controls vulnerability in multiple products
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
local
low complexity
tetex tug CWE-264
3.6
2007-11-13 CVE-2007-5935 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.
network
tetex tug CWE-119
6.8