PT-2004-3062 · Latex2Rtf · Latex2Rtf

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2167

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LaTeX2rtf version 1.9.15

Description The issue concerns buffer overflows that could allow remote attackers to execute arbitrary code. This is potentially achievable through the expandmacro function, as well as possibly through Environments and TranslateCommand.

Recommendations For LaTeX2rtf version 1.9.15, consider disabling the expandmacro function as a temporary workaround until a patch is available. Restrict the use of Environments and TranslateCommand to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-2167

Produtos afetados

Latex2Rtf

Referências · 11

• 🔥 http://securityfocus.com/bid/11233 · Exploit
• 🔥 https://exploit-db.com/exploits/24622 · Exploit
• 🔥 http://securitytracker.com/alerts/2004/Sep/1011367.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-2167 · Aviso do Fabricante
• http://osvdb.org/displayvuln.php?osvdb_id=10216 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17487 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2167 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-2167 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2004-2167 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17460 · Nota
• http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log · Nota