PT-2018-2811 · Tex Live · Mendex

Published

2018-12-03

·

Updated

2018-12-03

CVSS v2.0

3.6

Low

VectorAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions mendex from TeX Live (affected versions not specified)
Description The issue is related to buffer overflow errors when processing command line arguments. An attacker could exploit this to cause a denial of service by submitting a command with specially crafted parameters, allowing data to be written to a specific address.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

BDU:2019-02268

Affected Products

Mendex