|
|
CVE Reference: CVE-2007-0650 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-0650 |
|
|
Description: Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/32284 SAID Secunia Advisory: SA26982 Secunia Advisory: SA30168 MANDRIVA http://www.mandriva.com/security/advisories?name=MDKSA-2007:109 GENTOO http://security.gentoo.org/glsa/glsa-200805-13.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200709-17.xml CONFIRM BID 23872 |
|
| Return to the previous page. |
