CVE-2015-8106

HIGH 7.8CVE-2015-8106 · Published 18/04/2016 · updated 17/06/2026

In short

CVE-2015-8106 is a HIGH (CVSS 7.8) vulnerability affecting latex2rtf (latex2rtf project).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
latex2rtf latex2rtf_project	`= 2.3.8`	No fix yet

Description

Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the \keywords command in a crafted TeX file.

References

lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html
lists.fedoraproject.org/pipermail/package-announce/2016-April/181677.html
lists.fedoraproject.org/pipermail/package-announce/2016-April/181725.html
openwall.com/lists/oss-security/2015/11/16/3
bugzilla.redhat.com/show_bug.cgi
sourceforge.net/p/latex2rtf/code/1244

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free