PT-2018-2831 · Tex Users · Texlive-Dvips

Publicado

2018-12-03

·

Atualizado

2018-12-03

CVSS v2.0

4.6

Média

VetorAV:L/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions TeX Live dvips (affected versions not specified)
Description The issue is caused by a buffer overflow when processing command line parameters, which can lead to a denial of service or allow an attacker to execute arbitrary code by inputting a specially crafted sequence of data into the command line.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-02288

Produtos afetados

Texlive-Dvips