CVEvulnerability
CVE-2011-1400
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2011-03-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-16
Description
The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.
Affected configurations
• debian tex-common 0.1
• debian tex-common 0.2
• debian tex-common 0.3
• debian tex-common 0.4
• debian tex-common 0.5
• debian tex-common 0.6
• debian tex-common 0.7
• debian tex-common 0.8
• debian tex-common 0.9
• debian tex-common 0.10
• debian tex-common 0.11
• debian tex-common 0.12
• debian tex-common 0.13
• debian tex-common 0.14
• debian tex-common 0.15
• debian tex-common 0.16
• debian tex-common 0.17
• debian tex-common 0.18
• debian tex-common 0.19
• debian tex-common 0.20
• debian tex-common 0.21
• debian tex-common 0.22
• debian tex-common 0.23
• debian tex-common 0.24
• debian tex-common 0.25
• debian tex-common 0.26
• debian tex-common 0.27
• debian tex-common 0.28
• debian tex-common 0.29
• debian tex-common 0.30
• debian tex-common 0.31
• debian tex-common 0.32
• debian tex-common 0.33
• debian tex-common 0.34
• debian tex-common 0.35
• debian tex-common 0.36
• debian tex-common 0.37
• debian tex-common 0.38
• debian tex-common 0.39
• debian tex-common 0.40
• debian tex-common 0.41
• debian tex-common 0.42
• debian tex-common 0.43
• debian tex-common 0.44
• debian tex-common 1.0
• debian tex-common 1.1
• debian tex-common 1.2
• debian tex-common 1.3
• debian tex-common 1.4
• debian tex-common 1.5
• debian tex-common 1.6
• debian tex-common 1.7
• debian tex-common 1.8
• debian tex-common 1.9
• debian tex-common 1.10
• debian tex-common 1.11
• debian tex-common 1.11.1
• debian tex-common 1.11.2
• debian tex-common 1.11.3
• debian tex-common 1.12
… and 20 more
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/43816 Vendor Advisory
- http://secunia.com/advisories/43973 Vendor Advisory
- http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812 svn.debian.org
- http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log svn.debian.org
- http://www.debian.org/security/2011/dsa-2198 www.debian.org
- http://www.securityfocus.com/bid/46986 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1103-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0731 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0861 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66249 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/43816 Vendor Advisory
- http://secunia.com/advisories/43973 Vendor Advisory
- http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812 svn.debian.org
- http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log svn.debian.org
- http://www.debian.org/security/2011/dsa-2198 www.debian.org
- http://www.securityfocus.com/bid/46986 www.securityfocus.com
- http://www.ubuntu.com/usn/USN-1103-1 www.ubuntu.com
- http://www.vupen.com/english/advisories/2011/0731 Vendor Advisory
- http://www.vupen.com/english/advisories/2011/0861 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66249 exchange.xforce.ibmcloud.com