CVE Feed

    Dashboard / CVE / CVE-2007-5937

    CVE-2007-5937

    Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

    Published:Nov 6, 2007
    Last Modified:Apr 23, 2026
    EPS:Nov 13, 2007
    EPSS Score:0.02107
    CVSS Score:6.8

    Affected Products

    Vendor
    Tetex
    Product
    Tetex
    Vendor
    Tug
    Product
    Texlive 2007

    Exploits

    No exploit reference

    Related CVEs

    CVE-2011-5244 (CVSS 6.8) — Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in …
    CVE-2011-0433 (CVSS 6.8) — Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evi…
    CVE-2009-3608 (CVSS 9.3) — Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler …
    CVE-2007-5936 (CVSS 3.6) — dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify cert…
    CVE-2007-5935 (CVSS 6.8) — Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attac…
    CVE-2005-3624 (CVSS 5) — The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS…
    CVE-2005-3626 (CVSS 5) — Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow…
    CVE-2005-3625 (CVSS 10) — Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allow…
    CVE-2004-0889 (CVSS 10) — Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attac…
    CVE-2004-0888 (CVSS 10) — Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and …

    References

    http://bugs.gentoo.org/attachment.cgi?id=135423
    http://bugs.gentoo.org/show_bug.cgi?id=198238
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
    http://secunia.com/advisories/27672
    http://secunia.com/advisories/27686
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/27967
    http://secunia.com/advisories/28107
    http://secunia.com/advisories/28412
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200711-26.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/26469
    http://www.securitytracker.com/id?1019058
    http://www.vupen.com/english/advisories/2007/3896
    https://bugzilla.redhat.com/show_bug.cgi?id=368641
    https://issues.rpath.com/browse/RPL-1928
    https://usn.ubuntu.com/554-1/
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
    http://bugs.gentoo.org/attachment.cgi?id=135423
    http://bugs.gentoo.org/show_bug.cgi?id=198238
    http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
    http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
    http://secunia.com/advisories/27672
    http://secunia.com/advisories/27686
    http://secunia.com/advisories/27718
    http://secunia.com/advisories/27743
    http://secunia.com/advisories/27967
    http://secunia.com/advisories/28107
    http://secunia.com/advisories/28412
    http://secunia.com/advisories/30168
    http://security.gentoo.org/glsa/glsa-200711-26.xml
    http://security.gentoo.org/glsa/glsa-200711-34.xml
    http://security.gentoo.org/glsa/glsa-200805-13.xml
    http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
    http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
    http://www.securityfocus.com/archive/1/487984/100/0/threaded
    http://www.securityfocus.com/bid/26469
    http://www.securitytracker.com/id?1019058
    http://www.vupen.com/english/advisories/2007/3896
    https://bugzilla.redhat.com/show_bug.cgi?id=368641
    https://issues.rpath.com/browse/RPL-1928
    https://usn.ubuntu.com/554-1/
    https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High