CVE-2007-5936

dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.

Link	Resource
http://bugs.gentoo.org/attachment.cgi?id=135423
https://bugzilla.redhat.com/show_bug.cgi?id=368611
http://bugs.gentoo.org/show_bug.cgi?id=198238
http://security.gentoo.org/glsa/glsa-200711-26.xml
http://security.gentoo.org/glsa/glsa-200711-34.xml
http://www.mandriva.com/security/advisories?name=MDKSA-2007:230
http://www.securityfocus.com/bid/26469
http://www.securitytracker.com/id?1019058
http://secunia.com/advisories/27672	Vendor Advisory
http://secunia.com/advisories/27686	Vendor Advisory
http://secunia.com/advisories/27743	Vendor Advisory
https://issues.rpath.com/browse/RPL-1928
http://secunia.com/advisories/27967	Vendor Advisory
http://secunia.com/advisories/28107	Vendor Advisory
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
http://secunia.com/advisories/27718	Vendor Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html
http://secunia.com/advisories/28412	Vendor Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
http://security.gentoo.org/glsa/glsa-200805-13.xml
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
http://secunia.com/advisories/30168	Vendor Advisory
http://www.vupen.com/english/advisories/2007/3896
http://osvdb.org/42238
https://usn.ubuntu.com/554-1/
http://www.securityfocus.com/archive/1/487984/100/0/threaded

Configuration 1

cpe:2.3:a:tug:texlive_2007:*:*:*:*:*:*:*:* cpe:2.3:a:tetex:tetex:*:*:*:*:*:*:*:*

---

Published : 2007-11-13 10:46

Updated : 2018-10-15 09:47

---

NVD link : CVE-2007-5936

Mitre link : CVE-2007-5936

No products.

CWE-264