CVE-2002-0836
Fixed in a distro release EPSS 8%
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Products: hp secure_os, mandrakesoft mandrake_linux, redhat linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.1 |