CVE-2010-0829

2010-05-0718:24:15

CWE-119

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

7.7

Confidence

High

EPSS

0.036

Percentile

91.6%

JSON

Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.

Affected configurations

Nvd

Node

jan-ake_larssondvipngMatch1.11

jan-ake_larssondvipngMatch1.12

Node

tugtetex

VendorProductVersionCPE
jan-ake_larssondvipng1.11cpe:2.3:a:jan-ake_larsson:dvipng:1.11:*:*:*:*:*:*:*
jan-ake_larssondvipng1.12cpe:2.3:a:jan-ake_larsson:dvipng:1.12:*:*:*:*:*:*:*
tugtetex*cpe:2.3:a:tug:tetex:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
jan-ake_larsson	dvipng	1.11	cpe:2.3:a:jan-ake_larsson:dvipng:1.11:::::::*
jan-ake_larsson	dvipng	1.12	cpe:2.3:a:jan-ake_larsson:dvipng:1.12:::::::*
tug	tetex	*	cpe:2.3:a:tug:tetex::::::::