CVE Feed

    Dashboard / CVE / CVE-2007-5936

    CVE-2007-5936

    dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.

    Published:Nov 6, 2007
    Last Modified:Apr 23, 2026
    EPS:Nov 13, 2007
    EPSS Score:0.00096
    CVSS Score:3.6

    Affected Products

    Vendor
    Tetex
    Product
    Tetex
    Vendor
    Tug
    Product
    Texlive 2007

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-377 Insecure Temporary File

    Related CVEs

    CVE-2011-5244 (CVSS 6.8) — Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in …
    CVE-2011-0433 (CVSS 6.8) — Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evi…
    CVE-2009-3608 (CVSS 9.3) — Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler …
    CVE-2007-5937 (CVSS 6.8) — Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assiste…
    CVE-2007-5935 (CVSS 6.8) — Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attac…
    CVE-2005-3624 (CVSS 5) — The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS…
    CVE-2005-3626 (CVSS 5) — Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow…
    CVE-2005-3625 (CVSS 10) — Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow…
    CVE-2004-0889 (CVSS 10) — Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attac…
    CVE-2004-0888 (CVSS 10) — Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and …

    References

    http://bugs.gentoo.org/attachment.cgi?id=135423
    http://bugs.gentoo.org/show_bug.cgi?id=198238
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
    http://osvdb.org/42238
    http://secunia.com/advisories/27672
    http://secunia.com/advisories/27686
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/27967
    http://secunia.com/advisories/28107
    http://secunia.com/advisories/28412
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200711-26.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/26469
    http://www.securitytracker.com/id?1019058
    http://www.vupen.com/english/advisories/2007/3896
    https://bugzilla.redhat.com/show_bug.cgi?id=368611
    https://issues.rpath.com/browse/RPL-1928
    https://usn.ubuntu.com/554-1/
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
    http://bugs.gentoo.org/attachment.cgi?id=135423
    http://bugs.gentoo.org/show_bug.cgi?id=198238
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
    http://osvdb.org/42238
    http://secunia.com/advisories/27672
    http://secunia.com/advisories/27686
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/27967
    http://secunia.com/advisories/28107
    http://secunia.com/advisories/28412
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200711-26.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/26469
    http://www.securitytracker.com/id?1019058
    http://www.vupen.com/english/advisories/2007/3896
    https://bugzilla.redhat.com/show_bug.cgi?id=368611
    https://issues.rpath.com/browse/RPL-1928
    https://usn.ubuntu.com/554-1/
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High