Oval Definition:oval:org.mitre.oval:def:13403
Revision Date:2014-06-30Version:20
Title:USN-937-1 -- texlive-bin vulnerabilities
Description:It was discovered that TeX Live incorrectly handled certain long .bib bibliography files. If a user or automated system were tricked into processing a specially crafted bib file, an attacker could cause a denial of service via application crash. This issue only affected Ubuntu 8.04 LTS, 9.04 and 9.10. Marc Schoenefeld, Karel Šrot and Ludwig Nussel discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Dan Rosenberg discovered that TeX Live incorrectly handled certain malformed dvi files. If a user or automated system were tricked into processing a specially crafted dvi file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2009-1284
CVE-2010-0739
CVE-2010-0827
CVE-2010-1440
USN-937-1
USN-937-1
Platform(s):Ubuntu 10.04
Ubuntu 8.04
Ubuntu 9.04
Ubuntu 9.10
Product(s):texlive-bin
Definition Synopsis
  • Release section
  • Ubuntu 8.04 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • libkpathsea-dev DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-base-bin-doc DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-xetex DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-base-bin DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-extra-utils DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-music DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-lang-indic DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR libkpathsea4 DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-metapost DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-metapost-doc DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-omega DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR texlive-font-utils DPKG is earlier than 2007.dfsg.1-2ubuntu0.1
  • OR Release section
  • Ubuntu 10.04 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is powerpc
  • AND Packages section
  • texlive-binaries DPKG is earlier than 2009-5ubuntu0.1
  • OR libkpathsea-dev DPKG is earlier than 2009-5ubuntu0.1
  • OR libkpathsea5 DPKG is earlier than 2009-5ubuntu0.1
  • OR Release section
  • Ubuntu 9.04 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • libkpathsea-dev DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-base-bin-doc DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-xetex DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-base-bin DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-extra-utils DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-music DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-lang-indic DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR libkpathsea4 DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-metapost DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-metapost-doc DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-omega DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR texlive-font-utils DPKG is earlier than 2007.dfsg.2-4ubuntu2.1
  • OR Release section
  • Ubuntu 9.10 is installed
  • AND Supported architectures section
  • Installed architecture is sparc
  • OR Installed architecture is i386
  • OR Installed architecture is amd64
  • OR Installed architecture is lpia
  • OR Installed architecture is powerpc
  • AND Packages section
  • libkpathsea-dev DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-base-bin-doc DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-xetex DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-base-bin DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-extra-utils DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-music DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-lang-indic DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR libkpathsea4 DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-metapost DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-metapost-doc DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-omega DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • OR texlive-font-utils DPKG is earlier than 2007.dfsg.2-7ubuntu1.1
  • BACK