Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
References
Configurations
Configuration 1 (hide)
|
History
13 Feb 2023, 04:17
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739. |
02 Feb 2023, 14:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Summary | CVE-2010-1440 tetex, texlive: Integer overflow by processing special commands |
Information
Published : 2010-05-07 18:24
Updated : 2023-12-10 11:03
NVD link : CVE-2010-1440
Mitre link : CVE-2010-1440
CVE.ORG link : CVE-2010-1440
JSON object : View
Products Affected
tug
- tex_live
- tetex
CWE
CWE-189
Numeric Errors