18 results · Feed
-
Medium 6.6
TeX Live SyncTeX Parser Heap Use-After-Free via Malformed SyncTeX File
The SyncTeX parser (synctex_parser.c) shipped with TeX Live and embedded by downstream consumers such as GNOME Evince contains a heap use-after-free vulnerability that allows attackers to crash applications or potentially execute arbitrary code by supplying a…
-
High 8.1
texlive-bin commit c515e was discovered to contain heap buffer overflow via the function ttfLoadHDMX:ttfdump. This vuln…
-
High 8.8
LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted …
-
Medium 5.5
LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This oc…
-
Unscored —
XPDF v4.0.4 was discovered to contain a segmentation violation via the component /xpdf/AcroForm.cc:538.
-
Unscored —
In Xpdf prior to 4.04, the DCT (JPEG) decoder was incorrectly allowing the 'interleaved' flag to be changed after the f…
-
Unscored —
Xpdf prior to 4.04 lacked an integer overflow check in JPXStream.cc.
-
Unscored —
Xpdf prior to version 4.04 contains an integer overflow in the JBIG2 decoder (JBIG2Stream::readTextRegionSeg() in JBIG2…
-
Unscored —
There is a Null Pointer Dereference vulnerability in the XFAScanner::scanNode() function in XFAScanner.cc in xpdf 4.03.
-
Unscored —
In axohelp.c before 1.3 in axohelp in axodraw2 before 2.1.1b, as distributed in TeXLive and other collections, sprintf …
-
Unscored —
A stack-based buffer over-read exists in PostScriptFunction::transform in Function.cc in Xpdf 4.01.01 because GfxSepara…
-
Unscored —
A stack-based buffer over-read exists in FoFiTrueType::dumpString in fofi/FoFiTrueType.cc in Xpdf 4.01.01. It can, for …
-
Unscored —
There is a stack consumption issue in md5Round1() located in Decrypt.cc in Xpdf 4.01. It can be triggered by sending a …
-
Unscored —
There is an Invalid memory access in gAtomicIncrement() located at GMutex.h in Xpdf 4.01. It can be triggered by sendin…
-
Unscored —
An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A bu…
-
Unscored —
TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment v…
-
Unscored —
mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files vi…
-
Unscored —
readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor co…