CVE-2007-5935

teTeX and TeXlive 2007 - Stack-Based Buffer Overflow via DVI File Href Tag

Title source: llm
STIX 2.1

Description

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

References (26)

Core 26
Core References
Issue Tracking x_refsource_confirm
https://issues.rpath.com/browse/RPL-1928
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27672
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27743
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28412
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27686
Vendor Advisory vendor-advisory x_refsource_ubuntu
https://usn.ubuntu.com/554-1/
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26469
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11311
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200805-13.xml
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200711-26.xml
Issue Tracking x_refsource_confirm
http://bugs.gentoo.org/show_bug.cgi?id=198238
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30168
Issue Tracking x_refsource_misc
https://bugzilla.redhat.com/show_bug.cgi?id=368591
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3896
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27718
Third Party Advisory vendor-advisory x_refsource_gentoo
http://security.gentoo.org/glsa/glsa-200711-34.xml
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27967
Third Party Advisory x_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019058
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28107
Vendor Advisory vendor-advisory x_refsource_mandriva
http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/487984/100/0/threaded

Scores

EPSS 0.0395
EPSS Percentile 89.3%

Details

CWE
CWE-119
Status published
Products (2)
tetex/tetex
tug/texlive_2007
Published Nov 13, 2007
Tracked Since Feb 18, 2026