6.8

CVE-2010-1440

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Tug ≫ Tetex
Tug ≫ Tex Live Version <= 2009
Tug ≫ Tex Live Version1996
Tug ≫ Tex Live Version1998
Tug ≫ Tex Live Version1999
Tug ≫ Tex Live Version2000
Tug ≫ Tex Live Version2001
Tug ≫ Tex Live Version2002
Tug ≫ Tex Live Version2003
Tug ≫ Tex Live Version2004
Tug ≫ Tex Live Version2005
Tug ≫ Tex Live Version2007
Tug ≫ Tex Live Version2008
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.43% 0.874
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
http://security.gentoo.org/glsa/glsa-201206-28.xml
http://www.ubuntu.com/usn/USN-937-1
http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html
https://bugzilla.redhat.com/show_bug.cgi?id=586819
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10068