CVE-2010-1440 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2010-1440 Interim 1 11 2023-12-09T01:58:14Z current 2021-05-30T12:51:20Z 2023-12-09T01:58:14Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2010-1440 Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/PUQOSBC25X4IKVDHCM3GPXJFE5G56PXU/#PUQOSBC25X4IKVDHCM3GPXJFE5G56PXU E-Mail link for SUSE-SR:2010:012 https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/EG3CTD3H4CUVHS6LF3NQBD3PCOQ7QQJ3/#EG3CTD3H4CUVHS6LF3NQBD3PCOQ7QQJ3 E-Mail link for SUSE-SR:2010:013 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-2007-219.34.6 texlive-arab-2007-219.34.6 texlive-bin-2007-219.34.6 texlive-bin-cjk-2007-219.34.6 texlive-bin-devel-2007-219.34.6 texlive-bin-dvilj-2007-219.34.6 texlive-bin-jadetex-2007-219.34.6 texlive-bin-latex-2007-219.34.6 texlive-bin-metapost-2007-219.34.6 texlive-bin-musictex-2007-219.34.6 texlive-bin-omega-2007-219.34.6 texlive-bin-tex4ht-2007-219.34.6 texlive-bin-tools-2007-219.34.6 texlive-bin-xetex-2007-219.34.6 texlive-bin-xmltex-2007-219.34.6 texlive-cjk-2007-219.34.6 texlive-context-2007-219.34.6 texlive-devel-2007-219.34.6 texlive-doc-2007-219.34.6 texlive-dvilj-2007-219.34.6 texlive-jadetex-2007-219.34.6 texlive-latex-2007-219.34.6 texlive-latex-doc-2007-219.34.6 texlive-metapost-2007-219.34.6 texlive-musictex-2007-219.34.6 texlive-omega-2007-219.34.6 texlive-ppower4-2007-219.34.6 texlive-tex4ht-2007-219.34.6 texlive-tools-2007-219.34.6 texlive-xetex-2007-219.34.6 texlive-xmltex-2007-219.34.6 texlive-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-arab-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-cjk-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-devel-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-dvilj-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-jadetex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-latex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-metapost-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-musictex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-omega-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-tex4ht-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-tools-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-xetex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-bin-xmltex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-cjk-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-context-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-devel-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-doc-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-dvilj-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-jadetex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-latex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-latex-doc-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-metapost-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-musictex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-omega-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-ppower4-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-tex4ht-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-tools-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-xetex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 texlive-xmltex-2007-219.34.6 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739. CVE-2010-1440 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-arab-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-cjk-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-devel-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-dvilj-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-jadetex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-latex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-metapost-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-musictex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-omega-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-tex4ht-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-tools-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-xetex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-bin-xmltex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-cjk-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-context-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-devel-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-doc-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-dvilj-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-jadetex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-latex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-latex-doc-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-metapost-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-musictex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-omega-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-ppower4-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-tex4ht-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-tools-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-xetex-2007-219.34.6 SUSE Linux Enterprise Software Development Kit 11 SP4:texlive-xmltex-2007-219.34.6 moderate 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P