Записи tetex
13 опубликованных записей вендора tetex.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 7
- С записью об исправлении
- 92,3 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer3
- CWE-189 Numeric Errors3
- CWE-399 Resource Management Errors2
- CWE-264 Permissions, Privileges, and Access Controls1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
13 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
43В плане | CVE-2004-0888Эксплойта нет | Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote attakde · koffice | Критическая10,0 | — | 9,5 % | 27 янв. 2005 г. |
42В плане | CVE-2004-0889Эксплойта нет | Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of servxpdf · xpdf | Критическая10,0 | — | 6,2 % | 27 янв. 2005 г. |
41В плане | CVE-2005-3625Эксплойта нет | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Критическая10,0 | — | 3,8 % | 31 дек. 2005 г. |
40В плане | CVE-2009-3608Эксплойта нет | Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdfpoppler · poppler · CWE-189 | Критическая9,3 | — | 10,2 % | 21 окт. 2009 г. |
31Наблюдать | CVE-2005-0206Эксплойта нет | The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux dxpdf · xpdf | Высокая7,5 | — | 2,9 % | 27 апр. 2005 г. |
28Наблюдать | CVE-2011-0433Эксплойта нет | Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other producgnome · evince · CWE-119 | Средняя6,8 | — | 4,2 % | 19 нояб. 2012 г. |
28Наблюдать | CVE-2007-5935Эксплойта нет | Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary codetetex · tetex · CWE-119 | Средняя6,8 | — | 3,9 % | 13 нояб. 2007 г. |
28Наблюдать | CVE-2011-5244Эксплойта нет | Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x,t1lib · t1lib · CWE-189 | Средняя6,8 | — | 3,3 % | 19 нояб. 2012 г. |
28Наблюдать | CVE-2007-5937Эксплойта нет | Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitratetex · tetex · CWE-119 | Средняя6,8 | — | 3,1 % | 13 нояб. 2007 г. |
24Наблюдать | CVE-2001-0906Proof of concept | teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvitetex · tetex | Средняя6,2 | — | 0,9 % | 22 июн. 2001 г. |
21Наблюдать | CVE-2005-3626Эксплойта нет | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial libextractor · libextractor · CWE-399 | Средняя5,0 | — | 3,3 % | 31 дек. 2005 г. |
21Наблюдать | CVE-2005-3624Эксплойта нет | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others alllibextractor · libextractor · CWE-189 | Средняя5,0 | — | 2,3 % | 31 дек. 2005 г. |
14Наблюдать | CVE-2007-5936Эксплойта нет | dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain ttetex · tetex · CWE-264 | Низкая3,6 | — | 0,3 % | 13 нояб. 2007 г. |
- CVE-2004-088843В плане
Multiple integer overflows in xpdf 2.0 and 3.0, and other packages that use xpdf code such as CUPS, gpdf, and kdegraphics, allow remote atta
КритическаяCVSS 10,0Эксплойта нетEPSS 9 %kde · koffice27 янв. 2005 г.
- CVE-2004-088942В плане
Multiple integer overflows in xpdf 3.0, and other packages that use xpdf code such as CUPS, allow remote attackers to cause a denial of serv
КритическаяCVSS 10,0Эксплойта нетEPSS 6 %xpdf · xpdf27 янв. 2005 г.
- CVE-2005-362541В плане
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %libextractor · libextractor31 дек. 2005 г.
- CVE-2009-360840В плане
Integer overflow in the ObjectStream::ObjectStream function in XRef.cc in Xpdf 3.x before 3.02pl4 and Poppler before 0.12.1, as used in GPdf
КритическаяCVSS 9,3Эксплойта нетEPSS 10 %poppler · poppler21 окт. 2009 г.
- CVE-2005-020631Наблюдать
The patch for integer overflow vulnerabilities in Xpdf 2.0 and 3.0 (CVE-2004-0888) is incomplete for 64-bit architectures on certain Linux d
ВысокаяCVSS 7,5Эксплойта нетEPSS 2 %xpdf · xpdf27 апр. 2005 г.
- CVE-2011-043328Наблюдать
Heap-based buffer overflow in the linetoken function in afmparse.c in t1lib, as used in teTeX 3.0.x, GNOME evince, and possibly other produc
СредняяCVSS 6,8Эксплойта нетEPSS 4 %gnome · evince19 нояб. 2012 г.
- CVE-2007-593528Наблюдать
Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code
СредняяCVSS 6,8Эксплойта нетEPSS 3 %tetex · tetex13 нояб. 2007 г.
- CVE-2011-524428Наблюдать
Multiple off-by-one errors in the (1) token and (2) linetoken functions in backend/dvi/mdvi-lib/afmparse.c in t1lib, as used in teTeX 3.0.x,
СредняяCVSS 6,8Эксплойта нетEPSS 3 %t1lib · t1lib19 нояб. 2012 г.
- CVE-2007-593728Наблюдать
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitra
СредняяCVSS 6,8Эксплойта нетEPSS 3 %tetex · tetex13 нояб. 2007 г.
- CVE-2001-090624Наблюдать
teTeX filter before 1.0.7 allows local users to gain privileges via a symlink attack on temporary files that are produced when printing .dvi
СредняяCVSS 6,2Proof of conceptEPSS 0 %tetex · tetex22 июн. 2001 г.
- CVE-2005-362621Наблюдать
Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial
СредняяCVSS 5,0Эксплойта нетEPSS 3 %libextractor · libextractor31 дек. 2005 г.
- CVE-2005-362421Наблюдать
The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others all
СредняяCVSS 5,0Эксплойта нетEPSS 2 %libextractor · libextractor31 дек. 2005 г.
- CVE-2007-593614Наблюдать
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain t
НизкаяCVSS 3,6Эксплойта нетEPSS 0 %tetex · tetex13 нояб. 2007 г.