PT-2004-3062 · Latex2Rtf · Latex2Rtf

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2167

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions LaTeX2rtf version 1.9.15

Description The issue concerns buffer overflows that could allow remote attackers to execute arbitrary code. This is potentially achievable through the expandmacro function, as well as possibly through Environments and TranslateCommand.

Recommendations For LaTeX2rtf version 1.9.15, consider disabling the expandmacro function as a temporary workaround until a patch is available. Restrict the use of Environments and TranslateCommand to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-2167

Affected Products

Latex2Rtf

References · 11

• 🔥 http://securityfocus.com/bid/11233 · Exploit
• 🔥 https://exploit-db.com/exploits/24622 · Exploit
• 🔥 http://securitytracker.com/alerts/2004/Sep/1011367.html · Exploit
• https://security-tracker.debian.org/tracker/CVE-2004-2167 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2004-2167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-2167 · Security Note
• https://osv.dev/vulnerability/CVE-2004-2167 · Vendor Advisory
• http://osvdb.org/displayvuln.php?osvdb_id=10216 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17487 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17460 · Note
• http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log · Note