Lucene search

Gentoo FoundationGLSA-201206-28

HistoryJun 25, 2012 - 12:00 a.m.

TeX Live: Multiple vulnerabilities

2012-06-2500:00:00

Gentoo Foundation

security.gentoo.org

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.145 Low

EPSS

Percentile

95.8%

JSON

Background

TeX Live is a complete TeX distribution.

Description

Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details.

Impact

These vulnerabilities might allow user-assisted remote attackers to execute arbitrary code via a specially-crafted DVI file, or cause a Denial of Service.

Workaround

There is no known workaround at this time.

Resolution

All texlive-core users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose "&gt;=app-text/texlive-core-2009-r2"

OSVersionArchitecturePackageVersionFilename
Gentooanyallapp-text/texlive-core< 2009-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Gentoo	any	all	app-text/texlive-core	< 2009-r2	UNKNOWN

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.145 Low

EPSS

Percentile

95.8%

JSON

Related for GLSA-201206-28