// For flags

CVE-2007-5935

dvips -z buffer overflow with long href

Severity Score

9.8
*CVSS v3

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Desbodarmiento de búfer basado en pila en hpc.c en dvips en teTeX y TeXlive 2007 y anteriores permite a atacantes con la intervención del usuario ejecutar código de su elección a través de un archivo DVI conm una etiqueta href larga.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2007-11-13 CVE Reserved
  • 2007-11-13 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • 2025-03-30 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (27)
URL Tag Source
http://bugs.gentoo.org/show_bug.cgi?id=198238 X_refsource_confirm
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0266 X_refsource_confirm
http://www.securityfocus.com/archive/1/487984/100/0/threaded Mailing List
http://www.securityfocus.com/bid/26469 Vdb Entry
http://www.securitytracker.com/id?1019058 Vdb Entry
http://www.vupen.com/english/advisories/2007/3896 Vdb Entry
https://issues.rpath.com/browse/RPL-1928 X_refsource_confirm
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11311 Signature
URL Date SRC
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=447081 2024-08-07
URL Date SRC
URL Date SRC
http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html 2018-10-15
http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html 2018-10-15
http://secunia.com/advisories/27672 2018-10-15
http://secunia.com/advisories/27686 2018-10-15
http://secunia.com/advisories/27718 2018-10-15
http://secunia.com/advisories/27743 2018-10-15
http://secunia.com/advisories/27967 2018-10-15
http://secunia.com/advisories/28107 2018-10-15
http://secunia.com/advisories/28412 2018-10-15
http://secunia.com/advisories/30168 2018-10-15
http://security.gentoo.org/glsa/glsa-200711-26.xml 2018-10-15
http://security.gentoo.org/glsa/glsa-200711-34.xml 2018-10-15
http://security.gentoo.org/glsa/glsa-200805-13.xml 2018-10-15
http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 2018-10-15
https://bugzilla.redhat.com/show_bug.cgi?id=368591 2010-05-06
https://usn.ubuntu.com/554-1 2018-10-15
https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html 2018-10-15
https://access.redhat.com/security/cve/CVE-2007-5935 2010-05-06
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Tetex
Search vendor "Tetex"
 Tetex
Search vendor "Tetex" for product "Tetex"
*-
Affected
Tug
Search vendor "Tug"
 Texlive 2007
Search vendor "Tug" for product "Texlive 2007"
*-
Affected