CRITICAL10.0
Уязвимости операционной системы Debian GNU/Linux, позволяющие удаленному злоумышленнику нарушить конфиденциальность, целостность и доступность защищаемой информации
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:C
Severity:
Closed issues (3)
CRITICAL10.0
Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
- http://scary.beasts.org/security/CESA-2009-009.html
- http://secunia.com/advisories/35752
- http://secunia.com/advisories/35816
- http://www.ocert.org/advisories/ocert-2009-010.html
- http://www.securityfocus.com/archive/1/504919/100/0/threaded
- http://www.vupen.com/english/advisories/2009/1875
- http://www.vupen.com/english/advisories/2010/0877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51794
- http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
- http://scary.beasts.org/security/CESA-2009-009.html
- http://secunia.com/advisories/35752
- http://secunia.com/advisories/35816
- http://www.ocert.org/advisories/ocert-2009-010.html
- http://www.securityfocus.com/archive/1/504919/100/0/threaded
- http://www.vupen.com/english/advisories/2009/1875
- http://www.vupen.com/english/advisories/2010/0877
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51794
CRITICAL10.0
Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives.
CVSS 2.0CRITICAL 10.0
CVSS:2.0/AV:N/AC:L/Au:N/C:C/I:C/A:CReferences
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
- http://scary.beasts.org/security/CESA-2009-009.html
- http://secunia.com/advisories/35752
- http://www.vupen.com/english/advisories/2009/1875
- http://www.vupen.com/english/advisories/2010/0877
- http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
- http://scary.beasts.org/security/CESA-2009-009.html
- http://secunia.com/advisories/35752
- http://www.vupen.com/english/advisories/2009/1875
- http://www.vupen.com/english/advisories/2010/0877