CVE-2007-5936
First published: Tue Nov 06 2007(Updated: )
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tug Texlive 2007 | ||
| Tetex Tetex | ||
| redhat/3.0 | <40.3. | 40.3. |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://bugs.gentoo.org/attachment.cgi?id=135423
- https://bugzilla.redhat.com/show_bug.cgi?id=368611
- http://bugs.gentoo.org/show_bug.cgi?id=198238
- http://security.gentoo.org/glsa/glsa-200711-26.xml
- http://security.gentoo.org/glsa/glsa-200711-34.xml
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
- http://www.securityfocus.com/bid/26469
- http://www.securitytracker.com/id?1019058
- http://secunia.com/advisories/27672
- http://secunia.com/advisories/27686
- http://secunia.com/advisories/27743
- https://issues.rpath.com/browse/RPL-1928
- http://secunia.com/advisories/27967
- http://secunia.com/advisories/28107
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
- http://secunia.com/advisories/27718
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
- http://secunia.com/advisories/28412
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
- http://security.gentoo.org/glsa/glsa-200805-13.xml
- http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
- http://secunia.com/advisories/30168
- http://www.vupen.com/english/advisories/2007/3896
- http://osvdb.org/42238
- https://usn.ubuntu.com/554-1/
- http://www.securityfocus.com/archive/1/487984/100/0/threaded
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=249481&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=249481&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=250261&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=250261&action=edit
- collector/redhat-bugzilla
- alias/CVE-2007-5936
- collector/nvd-historical
- collector/nvd-index
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- package-manager/redhat
- vendor/tug
- canonical/tug texlive 2007
- vendor/tetex
- canonical/tetex tetex