CVE-2007-5935

Dashboard / Vulnerabilities / CVE-2007-5935

CVE-2007-5935

Published: 13 Nov 2007Last Modified: 10 Apr 2026

Summary:

Details: Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

References: http://secunia.com/advisories/27672, http://secunia.com/advisories/27686, http://secunia.com/advisories/27718, http://secunia.com/advisories/27743, http://secunia.com/advisories/27967, http://secunia.com/advisories/28107, http://secunia.com/advisories/28412, http://secunia.com/advisories/30168, http://security.gentoo.org/glsa/glsa-200711-26.xml, http://security.gentoo.org/glsa/glsa-200711-34.xml, http://security.gentoo.org/glsa/glsa-200805-13.xml, http://www.mandriva.com/security/advisories?name=MDKSA-2007:230, http://www.vupen.com/english/advisories/2007/3896, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447081, https://bugzilla.redhat.com/show_bug.cgi?id=368591, http://bugs.gentoo.org/show_bug.cgi?id=198238, http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html, http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html, http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266, http://www.securityfocus.com/archive/1/487984/100/0/threaded, http://www.securityfocus.com/bid/26469, http://www.securitytracker.com/id?1019058, https://issues.rpath.com/browse/RPL-1928, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11311, https://usn.ubuntu.com/554-1/, https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html

Affected packages

Common Vulnerability Scoring System

Attack Vector

Network

Adjacent

Local

Physical

Privileges Required

None

Low

High

User Interaction

None

Required

Scope

Unchanged

Changed

Confidentiality

None

Low

High

Integrity

None

Low

High

Availability

None

Low

High