GCVE - cpe:2.3:a:tug:texlive_2007:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tug:texlive_2007:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Tug (`99fcb8ed-7ef7-59af-a8dd-a3f02f7d9b08`)
Product	Texlive 2007 (`a9b2fd0b-428c-565f-afb8-9ad57de91134`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-5940`	vulnerable	2026-06-08 04:50:07.275537	Details available feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file. Published: 2007-11-13T23:00:00.000Z Updated: 2024-08-07T15:47:00.657Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=198231 http://secunia.com/advisories/27739 http://security.gentoo.org/glsa/glsa-200711-32.xml http://osvdb.org/42397 http://secunia.com/advisories/27737	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5937`	vulnerable	2026-06-08 04:50:07.271416	Details available Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file. Published: 2007-11-13T22:00:00.000Z Updated: 2024-08-07T15:47:00.570Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/attachment.cgi?id=135423 https://issues.rpath.com/browse/RPL-1928 http://secunia.com/advisories/27672 http://secunia.com/advisories/27743 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5936`	vulnerable	2026-06-08 04:50:07.270806	Details available dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place. Published: 2007-11-13T22:00:00.000Z Updated: 2024-08-07T15:47:00.575Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/attachment.cgi?id=135423 https://issues.rpath.com/browse/RPL-1928 http://secunia.com/advisories/27672 http://secunia.com/advisories/27743 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-5935`	vulnerable	2026-06-08 04:50:07.269996	Details available Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag. Published: 2007-11-13T22:00:00.000Z Updated: 2024-08-07T15:47:00.587Z Open on db.gcve.eu Reference links https://issues.rpath.com/browse/RPL-1928 http://secunia.com/advisories/27672 http://secunia.com/advisories/27743 http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html http://secunia.com/advisories/28412	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.