Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

tex-common: shell code execution

Package(s): tex-common CVE #(s): CVE-2011-1400

Created: March 23, 2011 Updated: April 5, 2011

Description: The tex-common script collection contains an insecure setting for the shell_escape_commands directive. As a result, it may be possible to execute arbitrary commands via a malicious .tex file.

Alerts:

Ubuntu	USN-1103-1	2011-04-04
Debian	DSA-2198-1	2011-03-22

(Log in to post comments)