CVE-2010-0827: tug tex_live Numeric Errors

EPSS trend

Probability

4.44%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.44% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

References

11 links

www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=logX Refsource CONFIRM
www.securityfocus.com/bid/39971VDB EntryX Refsource BID
security.gentoo.org/glsa/glsa-201206-28.xmlVendor AdvisoryX Refsource GENTOO
lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.htmlVendor AdvisoryX Refsource SUSE
www.tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?r1=18009&r2=18095X Refsource CONFIRM
lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.htmlVendor AdvisoryX Refsource SUSE
security-tracker.debian.org/tracker/CVE-2010-0827X Refsource CONFIRM
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052VDB EntrySignatureX Refsource OVAL
bugzilla.redhat.com/show_bug.cgi?id=572914X Refsource CONFIRM
www.ubuntu.com/usn/USN-937-1Vendor AdvisoryX Refsource UBUNTU

Show all 11 references

security-tracker.debian.org/tracker/CVE-2010-0827Advisory

Related vulnerabilities

CVE-2018-17407canonicalubuntu_linux+5672.06%8y ago23-09-2018 21:00An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.CVE-2016-10243debiantexlive-base+357.15%9y ago02-05-2017 14:00TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.CVE-2010-1440debiantexlive-bin+13.43%16y ago07-05-2010 17:43Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.CVE-2017-17513debiancontext+61.28%8y ago14-12-2017 16:00TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts/context/stubs/unix/mtxrun, texmf-dist/scripts/context/stubs/mswin/mtxrun.lua, and texmf-dist/tex/luatex/lualibs/lualibs-os.lua.CVE-2023-32700debiantexlive-bin+4200.80%3y ago20-05-2023 00:00LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.CVE-2023-32668debiantexlive-bin+40.37%3y ago11-05-2023 00:00LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket library is permitted by default, as stated in the documentation. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

All vulnerabilities intex_live

CVE-2010-0827: tug tex_live Numeric Errors

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References