NVD

Id
12284  
Name
CVE-2010-0739  
Description
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-16  
Modified Date
2013-04-18  
Seq
2010-0739  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
67616 12284 CVE-2010-0739 http://git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-stable.git;a=blob;f=source/xapps-extra/tetex/texlive-CVE-2010-0739-int-overflow.patch  View
67617 12284 CVE-2010-0739 FEDORA-2010-8273  View
67618 12284 CVE-2010-0739 SUSE-SR:2010:012  View
67619 12284 CVE-2010-0739 SUSE-SR:2010:013  View
67620 12284 CVE-2010-0739 oval:org.mitre.oval:def:11468  View
67621 12284 CVE-2010-0739 GLSA-201206-28  View
67622 12284 CVE-2010-0739 39500  View
67623 12284 CVE-2010-0739 USN-937-1  View
67624 12284 CVE-2010-0739 https://bugzilla.redhat.com/show_bug.cgi?id=572941  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35687 JVNDB-2010-001467 TeX Live および teTeX の predospecial 関数における整数オーバーフローの脆弱性 TeX Live および teTeX の dvips にある predospecial 関数には、整数オーバーフローの脆弱性が存在します。 CVE-2010-0739 43319 CVE-2010-0739 12284 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001467.html 2010-04-16 2010-05-26 View