Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-1440

Опубликовано: 07 мая 2010
Источник: nvd
CVSS2: 6.8
EPSS Низкий

Описание

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tug:tetex:*:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:*:*:*:*:*:*:*:*
Версия до 2009 (включая)
cpe:2.3:a:tug:tex_live:1996:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:1998:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:1999:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2000:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2001:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2002:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2003:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2004:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2005:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2007:*:*:*:*:*:*:*
cpe:2.3:a:tug:tex_live:2008:*:*:*:*:*:*:*

EPSS

Процентиль: 86%
0.02852
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189

Связанные уязвимости

ubuntu
около 15 лет назад

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

redhat
около 15 лет назад

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

debian
около 15 лет назад

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live ...

github
около 3 лет назад

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

oracle-oval
около 15 лет назад

ELSA-2010-0400: tetex security update (MODERATE)

EPSS

Процентиль: 86%
0.02852
Низкий

6.8 Medium

CVSS2

Дефекты

CWE-189