Vulnerabilities > TUG > Low

DATE CVE VULNERABILITY TITLE RISK
2017-10-06 CVE-2015-0296 Permissions, Privileges, and Access Controls vulnerability in TUG Texlive 3.1.20140525R34255.Fc21/6.20131226R32488.Fc20
The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r32488.fc20 and rpm allows local users to delete arbitrary files via a crafted file in the user's home directory.
local
high complexity
tug fedoraproject CWE-264
1.2
2007-11-13 CVE-2007-5936 Permissions, Privileges, and Access Controls vulnerability in multiple products
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
local
low complexity
tetex tug CWE-264
3.6