19 matches found
CVE-2019-19601
OpenDetex 2.8.5 has a Buffer Overflow in TexOpen in detex.l because of an incorrect sprintf...
GLSA-201709-07 : Kpathsea: User-assisted execution of arbitrary code
The remote host is affected by the vulnerability described in GLSA-201709-07 Kpathsea: User-assisted execution of arbitrary code It was discovered that the mpost program from the shellescapecommands list is capable of executing arbitrary external programs during the conversion of .tex files. The...
Kpathsea: User-assisted execution of arbitrary code
Background Kpathsea is a library to do path searching. It is used by TeX Live and others TeX related software. Description It was discovered that the mpost program from the shellescapecommands list is capable of executing arbitrary external programs during the conversion of .tex files. The...
CentOS Update for kpathsea CESA-2012:0137 centos6
The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CentOS Update for kpathsea CESA-2012:0137 centos6
Check for the Version of kpathsea OpenVAS Vulnerability Test CentOS Update for kpathsea CESA-2012:0137 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...
kpathsea, mendexk, texlive security update
CentOS Errata and Security Advisory CESA-2012:0137 Updated texlive packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS bas...
Fedora Core 10 FEDORA-2009-10730 (texlive)
The remote host is missing an update to texlive announced via advisory FEDORA-2009-10730. OpenVAS Vulnerability Test $Id: fcore200910730.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10730 texlive Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-10857 (texlive)
The remote host is missing an update to texlive announced via advisory FEDORA-2009-10857. OpenVAS Vulnerability Test $Id: fcore200910857.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10857 texlive Authors: Thomas Reinke Copyright: Copyright c 2009...
Fedora Core 11 FEDORA-2009-10857 (texlive)
The remote host is missing an update to texlive announced via advisory FEDORA-2009-10857. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...
Fedora 11 : texlive-2007-46.fc11 (2009-10857)
Fri Oct 23 2009 Jindrich Novy 2007-46 - add missing dependency on kpathsea - Thu Oct 15 2009 Jindrich Novy 2007-45 - make kpathsea not dependent on texlive - fix lacheck again 451513 - fix dvips configuration 467542 - update kpathsea description and summary 519257 - use upstream patch to fix pool...
Fedora 10 : texlive-2007-46.fc10 (2009-10730)
Fri Oct 23 2009 Jindrich Novy 2007-46 - add missing dependency on kpathsea - Thu Oct 15 2009 Jindrich Novy 2007-45 - make kpathsea not dependent on texlive - fix lacheck again 451513 - fix dvips configuration 467542 - update kpathsea description and summary 519257 - use upstream patch to fix pool...
Debian Security Advisory DSA 207-1 (tetex-bin)
The remote host is missing an update to tetex-bin announced via advisory DSA 207-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
Debian Security Advisory DSA 207-1 (tetex-bin)
The remote host is missing an update to tetex-bin announced via advisory DSA 207-1. OpenVAS Vulnerability Test $Id: deb2071.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 207-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Debian DSA-207-1 : tetex-bin - arbitrary command execution
The SuSE security team discovered a vulnerability in kpathsea library libkpathsea which is used by xdvi and dvips. Both programs call the system function insecurely, which allows a remote attacker to execute arbitrary commands via cleverly crafted DVI files. If dvips is used in a print filter, th...
[SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 207-1 [email protected] http://www.debian.org/security/ Martin Schulze December 11th, 2002 http://www.debian.org/security/faq -...
[SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 207-1 [email protected] http://www.debian.org/security/ Martin Schulze December 11th, 2002 http://www.debian.org/security/faq -...
Tetex command execution
Uncommented shell characters during system call in kpathsea library...
[SECURITY] [DSA 207-1] New tetex-lib packages fix arbitrary command execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 207-1 [email protected] http://www.debian.org/security/ Martin Schulze December 11th, 2002 http://www.debian.org/security/faq -...
DSA-207 tetex-bin - arbitrary command execution
Bulletin has no description...