CVEvulnerability
CVE-2007-5936
3.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2007-11-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 3.6 LOW — AV:L/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Affected configurations
• tetex tetex
• tug texlive 2007
Related
Weakness · not in database (1)
References
- http://bugs.gentoo.org/attachment.cgi?id=135423 bugs.gentoo.org
- http://bugs.gentoo.org/show_bug.cgi?id=198238 bugs.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html lists.opensuse.org
- http://osvdb.org/42238 osvdb.org
- http://secunia.com/advisories/27672 Vendor Advisory
- http://secunia.com/advisories/27686 Vendor Advisory
- http://secunia.com/advisories/27718 Vendor Advisory
- http://secunia.com/advisories/27743 Vendor Advisory
- http://secunia.com/advisories/27967 Vendor Advisory
- http://secunia.com/advisories/28107 Vendor Advisory
- http://secunia.com/advisories/28412 Vendor Advisory
- http://secunia.com/advisories/30168 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200711-26.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200711-34.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200805-13.xml security.gentoo.org
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 wiki.rpath.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 www.mandriva.com
- http://www.securityfocus.com/archive/1/487984/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26469 www.securityfocus.com
- http://www.securitytracker.com/id?1019058 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3896 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=368611 bugzilla.redhat.com
- https://issues.rpath.com/browse/RPL-1928 issues.rpath.com
- https://usn.ubuntu.com/554-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html www.redhat.com
- http://bugs.gentoo.org/attachment.cgi?id=135423 bugs.gentoo.org
- http://bugs.gentoo.org/show_bug.cgi?id=198238 bugs.gentoo.org
- http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html lists.opensuse.org
- http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html lists.opensuse.org
- http://osvdb.org/42238 osvdb.org
- http://secunia.com/advisories/27672 Vendor Advisory
- http://secunia.com/advisories/27686 Vendor Advisory
- http://secunia.com/advisories/27718 Vendor Advisory
- http://secunia.com/advisories/27743 Vendor Advisory
- http://secunia.com/advisories/27967 Vendor Advisory
- http://secunia.com/advisories/28107 Vendor Advisory
- http://secunia.com/advisories/28412 Vendor Advisory
- http://secunia.com/advisories/30168 Vendor Advisory
- http://security.gentoo.org/glsa/glsa-200711-26.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200711-34.xml security.gentoo.org
- http://security.gentoo.org/glsa/glsa-200805-13.xml security.gentoo.org
- http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 wiki.rpath.com
- http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 www.mandriva.com
- http://www.securityfocus.com/archive/1/487984/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26469 www.securityfocus.com
- http://www.securitytracker.com/id?1019058 www.securitytracker.com
- http://www.vupen.com/english/advisories/2007/3896 www.vupen.com
- https://bugzilla.redhat.com/show_bug.cgi?id=368611 bugzilla.redhat.com
- https://issues.rpath.com/browse/RPL-1928 issues.rpath.com
- https://usn.ubuntu.com/554-1/ usn.ubuntu.com
- https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html www.redhat.com