CVE-2007-5936
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information...
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Exploit likelihood
What each source reports
NVD Score used
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- Updated
- 2026-11-02
EUVDEUVD-2007-5906 No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
EUVD-2007-5906- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8g9-jwcj-22mf No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information...
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
GHSA-h8g9-jwcj-22mf- Updated
- 2026-11-02
OSV No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5936 No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
DEBIAN-CVE-2007-5936- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 |
before 2007-13 | 2007-13 |
texlive-binDebian:13 |
before 2007-13 | 2007-13 |
texlive-binDebian:14 |
before 2007-13 | 2007-13 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5936 is a low vulnerability (CVSS 3.6) in Tetex, published November 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in texlive-bin 2007-13.
References
bugs.gentoo.org/attachment.cgi?id=135423
issues.rpath.com/browse/RPL-1928
secunia.com/advisories/27672
lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
Show 23 moreShow less
usn.ubuntu.com/554-1
osvdb.org/42238
securityfocus.com/bid/26469
security.gentoo.org/glsa/glsa-200805-13.xml
vupen.com/english/advisories/2007/3896
bugzilla.redhat.com/show_bug.cgi?id=368611
redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
securitytracker.com/id?1019058
mandriva.com/security/advisories?name=MDKSA-2007:230
nvd.nist.gov/vuln/detail/CVE-2007-5936
github.com/advisories/GHSA-h8g9-jwcj-22mf
security-tracker.debian.org/tracker/CVE-2007-5936