Red Hat Security Advisory

RHSA-2010:0401

tetex security update

Released 2010-05-06 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Desktop version 3 tetex-1.0.7-67.19, tetex-1.0.7-67.19.i386, tetex-afm-1.0.7-67.19 +9
Red Hat Enterprise Linux AS version 3 tetex-1.0.7-67.19, tetex-1.0.7-67.19.i386, tetex-1.0.7-67.19.ia64 +21
Red Hat Enterprise Linux ES version 3 tetex-1.0.7-67.19, tetex-1.0.7-67.19.i386, tetex-1.0.7-67.19.ia64 +15
Red Hat Enterprise Linux WS version 3 tetex-1.0.7-67.19, tetex-1.0.7-67.19.i386, tetex-1.0.7-67.19.ia64 +15

Fixes 6 records

TI-2009-00753 CVE-2009-0791 · GHSA-89xf-5fpv-6xg6

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops…

LOW 39

Multiple integer overflows in Xpdf 2.x and 3.x and Poppler 0.x, as used in the pdftops filter in CUPS 1.1.17, 1.1.22, and 1.3.7, GPdf, and kdegraphics KPDF, allow remote attackers to cause a denial of service (applicatio…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.05544 Published 2009-06-09 Fixed CWE-189

TI-2010-00706 CVE-2010-0739 · GHSA-g329-cmhw-r62r

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and…

LOW 38

Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based b…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04918 Published 2010-04-16 Fixed CWE-189

TI-2010-00788 CVE-2010-0827 · GHSA-8p99-hj29-qxw6

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote…

LOW 37

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associat…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.04439 Published 2010-05-07 Fixed CWE-189

TI-2007-05674 CVE-2007-5935 · GHSA-m7c5-9grq-3jqp

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier…

LOW 37

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.03953 Published 2007-11-13 Fixed CWE-119

TI-2010-01394 CVE-2010-1440 · GHSA-p26p-qrwm-pp59

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier…

LOW 36

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0343 Published 2010-05-07 Fixed CWE-189

TI-2009-03446 CVE-2009-3609 · GHSA-hr5j-672h-fcgc

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before…

LOW 28

Integer overflow in the ImageStream::ImageStream function in Stream.cc in Xpdf before 3.02pl4 and Poppler before 0.12.1, as used in GPdf, kdegraphics KPDF, and CUPS pdftops, allows remote attackers to cause a denial of s…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04665 Published 2009-10-21 Fixed CWE-189