tetex: buffer overflow [LWN.net]

Package(s):

tetex

CVE #(s):

CVE-2007-0650

Created:

May 8, 2007

Updated:

May 13, 2008

Description:

A buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function.

Alerts:

Gentoo	200805-13	2008-05-12
Gentoo	200709-17	2007-09-27
Mandriva	MDKSA-2007:109	2007-05-23
rPath	rPSA-2007-0092-1	2007-05-07

(Log in to post comments)

tetex: buffer overflow

Posted Sep 27, 2007 18:33 UTC (Thu) by kreutzm (guest, #4700) [Link]

Debian Sarge and Etch are not vulnerable.