CVEvulnerability
CVE-2015-8106
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-04-18
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the \keywords command in a crafted TeX file.
Affected configurations
• latex2rtf project latex2rtf 2.3.8
• fedoraproject fedora 22
• fedoraproject fedora 23
• fedoraproject fedora 24
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181677.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181725.html lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2015/11/16/3 www.openwall.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1282492 bugzilla.redhat.com
- https://sourceforge.net/p/latex2rtf/code/1244/ sourceforge.net
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181677.html lists.fedoraproject.org
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181725.html lists.fedoraproject.org
- http://www.openwall.com/lists/oss-security/2015/11/16/3 www.openwall.com
- https://bugzilla.redhat.com/show_bug.cgi?id=1282492 bugzilla.redhat.com
- https://sourceforge.net/p/latex2rtf/code/1244/ sourceforge.net