PT-2011-1378

Name of the Vulnerable Software and Affected Versions Evince versions 2.32 and earlier Description The issue is related to an integer overflow in the TFM font parser. This allows remote attackers to execute arbitrary code through a crafted font in conjunction with a DVI file that is processed by...

PT-2011-1376

Name of the Vulnerable Software and Affected Versions Evince versions 2.32 and earlier Description The issue is related to an array index error in the PK font parser of the dvi-backend component. This error can be exploited by remote attackers to cause a denial of service, resulting in an...

PT-2011-1029

Name of the Vulnerable Software and Affected Versions texlive-debuginfo-2007 versions 2007 texlive-dviutils-2007 versions 2007 texlive-context-2007 versions 2007 texlive-utils-2007 versions 2007 texlive-2007 versions 2007 t1lib versions 5.1.2 and earlier texlive-dvips-2007 versions 2007...

Ubuntu 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : evince vulnerabilities (USN-1035-1)

Jon Larimer discovered that Evince's font parsers incorrectly handled certain buffer lengths when rendering a DVI file. By tricking a user into opening or previewing a DVI file that uses a specially crafted font file, an attacker could crash evince or execute arbitrary code with the user's...

USN-1035-1: Evince vulnerabilities

Jon Larimer discovered that Evince's font parsers incorrectly handled certain buffer lengths when rendering a DVI file. By tricking a user into opening or previewing a DVI file that uses a specially crafted font file, an attacker could crash evince or execute arbitrary code with the user's...

CVE-2010-2641

Array index error in the VF font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

CVE-2010-2643

Integer overflow in the TFM font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

CVE-2010-2640

Array index error in the PK font parser in the dvi-backend component in Evince 2.32 and earlier allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer...

CVE-2010-2642

Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a crafted font in conjunctio...

Fedora Update for dvipng FEDORA-2010-8252

Check for the Version of dvipng OpenVAS Vulnerability Test Fedora Update for dvipng FEDORA-2010-8252 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: dvipng-1.13-1.fc13

This program makes PNG and/or GIF graphics from DVI files as obtained from TeX and its relatives. It is intended to produce anti-aliased screen-resolution images as fast as is possible. The target audience is people who need to generate and regenerate many images again and again...

[SECURITY] Fedora 11 Update: dvipng-1.13-1.fc11

This program makes PNG and/or GIF graphics from DVI files as obtained from TeX and its relatives. It is intended to produce anti-aliased screen-resolution images as fast as is possible. The target audience is people who need to generate and regenerate many images again and again...

[SECURITY] Fedora 12 Update: dvipng-1.13-1.fc12

This program makes PNG and/or GIF graphics from DVI files as obtained from TeX and its relatives. It is intended to produce anti-aliased screen-resolution images as fast as is possible. The target audience is people who need to generate and regenerate many images again and again...

Mandriva Linux Security Advisory : tetex (MDVSA-2010:094)

Multiple vulnerabilities has been discovered and fixed in tetex : Buffer overflow in BibTeX 0.99 allows context-dependent attackers to cause a denial of service memory corruption and crash via a long .bib bibliography file CVE-2009-1284. Integer overflow in the ObjectStream::ObjectStream function...

TeX Live predospecial()函数.dvi文件解析整数溢出漏洞

BUGTRAQ ID: 39500 CVECAN ID: CVE-2010-0739 TeX Live是用于创建TeX排版系统的工具。 TeX Live的dospecial.c文件中的predospecial函数在处理.dvi文件时存在最终可导致堆溢出的整数溢出漏洞。用户受骗打开了畸形的.dvi文件就可以触发这个溢出，导致以运行应用程序用户的权限执行任意代码。 TeX Live 3.0 TeX Live 2008 TeX Live 2007 TeX Live 2.0 TeX Live 1.0 厂商补丁： RedHat ------...

dvipng / TeX Live memory corruption

Memory corruption on DVI files processing...

RHEL 5 : tetex (RHSA-2010:0400)

Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

tetex security update

CentOS Errata and Security Advisory CESA-2010:0401 Updated tetex packages that fix multiple security issues are now available for Red Hat Enterprise Linux 3. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base...

DEBIAN-CVE-2010-1440

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a special command in a DVI file, related to the 1 predospecial and 2 bbdospecial function...

DEBIAN-CVE-2010-0829

Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a malformed DVI file...