tetex records
13 published records for vendor tetex.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 7
- With a fix record
- 92.3%
- Median publish → KEV
- No record has entered KEV
Records by year
Bar: total · dark part: CISA KEV.
Recurring classes
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-189 Numeric Errors3
- CWE-399 Resource Management Errors2
- CWE-264 Permissions, Privileges, and Access Controls1
The weakness classes this vendor ships most often: where to look.
CWEAll records
13 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2004-0888No exploit | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attakde · koffice | Critical10.0 | — | 9.5% | Jan 27, 2005 |
42Plan | CVE-2004-0889No exploit | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of servxpdf · xpdf | Critical10.0 | — | 6.2% | Jan 27, 2005 |
41Plan | CVE-2005-3625No exploit | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Critical10.0 | — | 3.8% | Dec 31, 2005 |
40Plan | CVE-2009-3608No exploit | Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdfpoppler · poppler · CWE-189 | Critical9.3 | — | 10.2% | Oct 21, 2009 |
31Monitor | CVE-2005-0206No exploit | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux dxpdf · xpdf | High7.5 | — | 2.9% | Apr 27, 2005 |
28Monitor | CVE-2011-0433No exploit | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other producgnome · evince · CWE-119 | Medium6.8 | — | 4.2% | Nov 19, 2012 |
28Monitor | CVE-2007-5935No exploit | Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary codetetex · tetex · CWE-119 | Medium6.8 | — | 3.9% | Nov 13, 2007 |
28Monitor | CVE-2011-5244No exploit | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x,t1lib · t1lib · CWE-189 | Medium6.8 | — | 3.3% | Nov 19, 2012 |
28Monitor | CVE-2007-5937No exploit | Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitratetex · tetex · CWE-119 | Medium6.8 | — | 3.1% | Nov 13, 2007 |
24Monitor | CVE-2001-0906Proof of concept | teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvitetex · tetex | Medium6.2 | — | 0.9% | Jun 22, 2001 |
21Monitor | CVE-2005-3626No exploit | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Medium5.0 | — | 3.3% | Dec 31, 2005 |
21Monitor | CVE-2005-3624No exploit | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others alllibextractor · libextractor · CWE-189 | Medium5.0 | — | 2.3% | Dec 31, 2005 |
14Monitor | CVE-2007-5936No exploit | dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain ttetex · tetex · CWE-264 | Low3.6 | — | 0.3% | Nov 13, 2007 |
- CVE-2004-088843Plan
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta
CriticalCVSS 10.0No exploitEPSS 9%kde · kofficeJan 27, 2005
- CVE-2004-088942Plan
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv
CriticalCVSS 10.0No exploitEPSS 6%xpdf · xpdfJan 27, 2005
- CVE-2005-362541Plan
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
CriticalCVSS 10.0No exploitEPSS 3%libextractor · libextractorDec 31, 2005
- CVE-2009-360840Plan
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf
CriticalCVSS 9.3No exploitEPSS 10%poppler · popplerOct 21, 2009
- CVE-2005-020631Monitor
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux d
HighCVSS 7.5No exploitEPSS 2%xpdf · xpdfApr 27, 2005
- CVE-2011-043328Monitor
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other produc
MediumCVSS 6.8No exploitEPSS 4%gnome · evinceNov 19, 2012
- CVE-2007-593528Monitor
Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code
MediumCVSS 6.8No exploitEPSS 3%tetex · tetexNov 13, 2007
- CVE-2011-524428Monitor
Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x,
MediumCVSS 6.8No exploitEPSS 3%t1lib · t1libNov 19, 2012
- CVE-2007-593728Monitor
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitra
MediumCVSS 6.8No exploitEPSS 3%tetex · tetexNov 13, 2007
- CVE-2001-090624Monitor
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi
MediumCVSS 6.2Proof of conceptEPSS 0%tetex · tetexJun 22, 2001
- CVE-2005-362621Monitor
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
MediumCVSS 5.0No exploitEPSS 3%libextractor · libextractorDec 31, 2005
- CVE-2005-362421Monitor
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all
MediumCVSS 5.0No exploitEPSS 2%libextractor · libextractorDec 31, 2005
- CVE-2007-593614Monitor
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain t
LowCVSS 3.6No exploitEPSS 0%tetex · tetexNov 13, 2007