6.8

CVE-2010-0827

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tug ≫ Tex Live Version <= 2009
Tug ≫ Tex Live Version1996
Tug ≫ Tex Live Version1998
Tug ≫ Tex Live Version1999
Tug ≫ Tex Live Version2000
Tug ≫ Tex Live Version2001
Tug ≫ Tex Live Version2002
Tug ≫ Tex Live Version2003
Tug ≫ Tex Live Version2004
Tug ≫ Tex Live Version2005
Tug ≫ Tex Live Version2007
Tug ≫ Tex Live Version2008
Tug ≫ Tetex
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 5.67% 0.894
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P