CVE ID:	CVE-2007-5935
Description:	Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.
Test IDs:	1.3.6.1.4.1.25623.1.0.59883   1.3.6.1.4.1.25623.1.0.59882
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2007-5935 Bugtraq: 20080212 FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts (Google Search) http://www.securityfocus.com/archive/1/archive/1/487984/100/0/threaded https://bugzilla.redhat.com/show_bug.cgi?id=368591 https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00663.html http://security.gentoo.org/glsa/glsa-200711-26.xml http://security.gentoo.org/glsa/glsa-200711-34.xml http://security.gentoo.org/glsa/glsa-200805-13.xml http://www.mandriva.com/security/advisories?name=MDKSA-2007:230 SuSE Security Announcement: SUSE-SR:2008:001 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-01/msg00002.html SuSE Security Announcement: SUSE-SR:2008:011 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html http://www.ubuntulinux.org/support/documentation/usn/usn-554-1 BugTraq ID: 26469 http://www.securityfocus.com/bid/26469 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11311 http://www.vupen.com/english/advisories/2007/3896 http://www.securitytracker.com/id?1019058 http://secunia.com/advisories/27672 http://secunia.com/advisories/27686 http://secunia.com/advisories/27743 http://secunia.com/advisories/27967 http://secunia.com/advisories/28107 http://secunia.com/advisories/27718 http://secunia.com/advisories/28412 http://secunia.com/advisories/30168

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: