CVE-2010-0827

Published: May 7, 2010Modified: Apr 29, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.

Affected (13)

Products: Tug: Tex Live, Tetex

2 products

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Tug Tex Live	version ≤ 2009
Tug Tex Live	Version 1996
Tug Tex Live	Version 1998
Tug Tex Live	Version 1999
Tug Tex Live	Version 2000
Tug Tex Live	Version 2001
Tug Tex Live	Version 2002
Tug Tex Live	Version 2003
Tug Tex Live	Version 2004
Tug Tex Live	Version 2005
Tug Tex Live	Version 2007
Tug Tex Live	Version 2008

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Tug Tetex	All versions

Related CWEs

References (20)

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html

Source: security@ubuntu.com

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: security@ubuntu.com

http://security-tracker.debian.org/tracker/CVE-2010-0827

Source: security@ubuntu.com

http://security.gentoo.org/glsa/glsa-201206-28.xml

Source: security@ubuntu.com

http://www.securityfocus.com/bid/39971

Source: security@ubuntu.com

http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095

Source: security@ubuntu.com

http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log

Source: security@ubuntu.com

http://www.ubuntu.com/usn/USN-937-1

Source: security@ubuntu.com

https://bugzilla.redhat.com/show_bug.cgi?id=572914

Source: security@ubuntu.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052

Source: security@ubuntu.com

http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://security-tracker.debian.org/tracker/CVE-2010-0827

Source: af854a3a-2127-422b-91ae-364da2661108

http://security.gentoo.org/glsa/glsa-201206-28.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/39971

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ubuntu.com/usn/USN-937-1

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=572914

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.