NVD

Id
12967  
Name
CVE-2010-1440  
Description
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-05-07  
Modified Date
2013-04-18  
Seq
2010-1440  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
71820 12967 CVE-2010-1440 FEDORA-2010-8273  View
71821 12967 CVE-2010-1440 SUSE-SR:2010:012  View
71822 12967 CVE-2010-1440 SUSE-SR:2010:013  View
71823 12967 CVE-2010-1440 oval:org.mitre.oval:def:10068  View
71824 12967 CVE-2010-1440 GLSA-201206-28  View
71825 12967 CVE-2010-1440 USN-937-1  View
71826 12967 CVE-2010-1440 https://bugzilla.redhat.com/show_bug.cgi?id=586819  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35688 JVNDB-2010-001468 TeX Live 2009 および teTeX の dvipsk/dospecial.c における整数オーバーフローの脆弱性 TeX Live 2009 および teTeX の dvips にある dvipsk/dospecial.c には、特定のコマンドを含む DVI ファイルの処理に関して不備があるため、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2010-1440 44020 CVE-2010-1440 12967 6.8 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-001468.html 2010-05-06 2010-05-26 View