CVE-2010-0827: Integer Overflow
First published: Fri Mar 12 2010(Updated: )
Dan Rosenberg found a buffer overflow flaw in the way TeX text formatting system processed virtual font files. If a user was tricked into processing a specially-crafted typesetter-independent .dvi (DeVice Independent) file, it could lead to dvips executable crash or, potentially, to arbitrary code execution with the privileges of the user running dvips.
Credit: security@ubuntu.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Tex Live | <=2009 | |
| Tex Live | =1996 | |
| Tex Live | =1998 | |
| Tex Live | =1999 | |
| Tex Live | =2000 | |
| Tex Live | =2001 | |
| Tex Live | =2002 | |
| Tex Live | =2003 | |
| Tex Live | =2004 | |
| Tex Live | =2005 | |
| Tex Live | =2007 | |
| Tex Live | =2008 | |
| teTeX |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ubuntu.com/usn/USN-937-1
- http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
- https://bugzilla.redhat.com/show_bug.cgi?id=572914
- http://security-tracker.debian.org/tracker/CVE-2010-0827
- http://www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
- http://www.securityfocus.com/bid/39971
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- http://security.gentoo.org/glsa/glsa-201206-28.xml
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052
- http://www.redhat.com/magazine/009jul05/features/execshield/#checks
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=400247&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=400247&action=edit
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=406226&action=diff
- https://bugzilla.redhat.com/show_bug.cgi/attachment.cgi?id=406226&action=edit
- https://rhn.redhat.com/errata/RHSA-2010-0399.html
- https://rhn.redhat.com/errata/RHSA-2010-0401.html
- http://www.tug.org/svn/texlive?view=revision&revision=17560
Frequently Asked Questions
What is the severity of CVE-2010-0827?
CVE-2010-0827 has a high severity due to the potential for arbitrary code execution from a buffer overflow.
How do I fix CVE-2010-0827?
To fix CVE-2010-0827, update TeX Live or teTeX to the latest version that has addressed this vulnerability.
Which versions of TeX Live are affected by CVE-2010-0827?
CVE-2010-0827 affects TeX Live versions from 1996 to 2009 and certain versions of teTeX.
What is the impact of CVE-2010-0827?
The impact of CVE-2010-0827 includes the possibility of crashes or execution of arbitrary code via specially crafted .dvi files.
Who discovered CVE-2010-0827?
CVE-2010-0827 was discovered by security researcher Dan Rosenberg.
- agent/references
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/author
- agent/event
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2010-0827
- agent/trending
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/tug
- canonical/tex live
- version/tex live/2007
- version/tex live/2008
- version/tex live/2004
- version/tex live/2009
- version/tex live/2002
- version/tex live/1996
- version/tex live/2001
- version/tex live/1999
- version/tex live/2005
- version/tex live/1998
- version/tex live/2000
- version/tex live/2003
- canonical/tetex