Description
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 3.0 | tetex-bin | 1.0.7+20011202-7.1 | DSA-207 |
Advisories 1
- DSA-207 tetex-bin - arbitrary command execution Debian Security (DSA / DLA) · Mar 9, 2026
References
- 20021018 GLSA: tetex mailing-list
- 5978 vdb-entry
- 20021216 [OpenPKG-SA-2002.015] OpenPKG Security Advisory (tetex) mailing-list
- CLA-2002:537 vendor-advisory
- VU#169841 third-party-advisory
- DSA-207 vendor-advisory
- HPSBTL0210-073 vendor-advisory
- RHSA-2002:195 vendor-advisory
- dvips-system-execute-commands(10365) vdb-entry
- RHSA-2002:194 vendor-advisory
- MDKSA-2002:070 vendor-advisory