CVE-2010-0829
Fixed in a distro release EPSS 5%
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
Products: jan-ake_larsson dvipng, tug tetex
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | dvipng | 1.13-1 |
| Debian 13 | dvipng | 1.13-1 |
| Debian 14 | dvipng | 1.13-1 |
| Debian 5.0 | dvipng | 1.11-1+lenny1 |
| Red Hat Enterprise Linux 5 | tetex | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-afm | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-debuginfo | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-doc | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-dvips | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-fonts | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-latex | 0:3.0-33.8.el5_5.5 |
| Red Hat Enterprise Linux 5 | tetex-xdvi | 0:3.0-33.8.el5_5.5 |