| Package | Affected versions | Patched versions |
|---|---|---|
| tex live | = 1996= 1998= 1999= 2000= 2001= 2002= 2003= 2004= 2005= 2007= 2008≤ 2009 |
Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free