Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2010-05-07 11:24
Updated : 2023-02-12 20:17
NVD link : CVE-2010-1440
Mitre link : CVE-2010-1440
JSON object : View
CWE
CWE-189
Numeric Errors
Products Affected
tug
- tetex
- tex_live