texinfo vulnerability

2006-11-0900:00:00

ubuntu.com

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

28.0%

JSON

Releases

Ubuntu 6.10
Ubuntu 6.06
Ubuntu 5.10

Details

Miloslav Trmac discovered a buffer overflow in texinfo’s index
processor. If a user is tricked into processing a .texi file with
texindex, this could lead to arbitrary code execution with user
privileges.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchtexinfo< 4.8.dfsg.1-1ubuntu0.1UNKNOWN
Ubuntu6.06noarchtexinfo< 4.8-4ubuntu0.1UNKNOWN
Ubuntu5.10noarchtexinfo< 4.7-2.2ubuntu2.2UNKNOWN