PT-2010-2483 · Tex Users+2 · Tex Live+2

CVE-2010-0739 · Publicado 2010-04-16 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TeX Live (affected versions not specified) teTeX (affected versions not specified)

Description The issue is related to an integer overflow in the predospecial function, which might allow attackers to execute arbitrary code via a crafted DVI file, potentially triggering a heap-based buffer overflow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2010-0739

RHSA-2010:0399

RHSA-2010:0400

RHSA-2010:0401

RHSA-2010_0399

RHSA-2010_0400

Produtos afetados

Red Hat

Tex Live

Tetex

Referências · 71

• https://bdu.fstec.ru/vul/2015-04167 · Nota de Segurança
• http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=572941 · Nota
• https://bdu.fstec.ru/vul/2015-02169 · Nota de Segurança
• https://access.redhat.com/security/cve/CVE-2009-0147 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0739 · Nota de Segurança
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447081 · Nota
• https://bdu.fstec.ru/vul/2015-00993 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-00992 · Nota de Segurança
• http://secunia.com/advisories/39390 · Aviso do Fabricante
• https://access.redhat.com/security/cve/CVE-2010-0739 · Nota
• https://access.redhat.com/security/cve/CVE-2009-3609 · Nota
• https://bdu.fstec.ru/vul/2015-04165 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-06216 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-04161 · Nota de Segurança