CVE-2007-5937

CVE-2007-5937 affects the teTeX/TeX Live family (2007 and earlier) via multiple buffer overflows in dvi2xx.c of dviljk. The flaw allows a user‑assisted attacker to achieve arbitrary code execution by supplying a crafted DVI file. References in OpenVAS and Linux advisories corroborate involvement ...

CVE-2007-5935

CVE-2007-5935 is a stack-based buffer overflow in dvips (teTeX/dvips) that affects teTeX/TeXlive 2007 and earlier. The overflow occurs in hpc.c when processing DVI files containing long href tags, allowing a user-assisted attacker to potentially execute arbitrary code. Connected advisories (RHSA-...

CVE-2007-5936

CVE-2007-5936 affects dvips in teTeX and TeX Live (2007 and earlier). Local users could create certain temporary files before they are processed by dviljk, which could then be read or modified in place, enabling information disclosure and data modification. The root cause is improper handling of ...

CVE-2007-5940

CVE-2007-5940 affects feynmf 1.08 (as used in TeXLive 2007). A local attacker can exploit a symlink-related race in the temporary file feynmf$PID.pl created by feynmf.pl, allowing overwriting arbitrary files and potential code execution. The documented impact includes partial confidentiality, int...