CVE-2010-2642

CVE-2010-2642 describes a heap-based buffer overflow in the AFM font parser of the dvi-backend used by Evince (2.32 and earlier), teTeX 3.0, and t1lib 5.1.2, among others. The vulnerability is triggered by a crafted font in a DVI file processed by the thumbnailer, potentially resulting in a denia...

CVE-2010-0829

CVE-2010-0829 involves multiple array index errors in set.c within dvipng 1.11/1.12 and the TeX-based TeX/teTeX toolchain, allowing remote attackers to crash the application or possibly run arbitrary code by feeding a malformed DVI file. The provided connected documents confirm the affected compo...

CVE-2010-0739

CVE-2010-0739 affects TeX Live and teTeX dvips parsing of DVI files. Root cause: integer/heap-based overflow in predospecial() of dospecial.c, triggered by a crafted DVI file, enabling user-assisted remote code execution. Connected advisories indicate TeX Live/teTeX components are vulnerable; pat...

CVE-2010-0827

CVE-2010-0827: In TeX Live 2009 and earlier, and in teTeX, an integer overflow in dvips when processing virtual font (VF) files associated with DVI can crash the application or potentially allow arbitrary code execution. Affected: TeX Live 2009 and earlier / teTeX. Impact: denial of service or po...

CVE-2010-1440

CVE-2010-1440 affects dvips in TeX Live 2009 and earlier and teTeX. The issue is multiple integer overflows in dvipsk/dospecial.c that can be triggered by a crafted DVI file via predospecial and bbdospecial, potentially causing a denial of service or arbitrary code execution. Praises of impact ar...