CVE-2007-5937

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow...

6.8 MediumFix available

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Exploit likelihood

3.15%Down 1.3 points since Feb 4, 2022

What each source reports

NVD Score used 6.8

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: CVE-2007-5937
CVSS 2.0: 6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness: CWE-119
Updated: 2026-11-02

CVE List No score

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: CVE-2007-5937
Updated: 2026-11-02

EUVDEUVD-2007-5907 No score

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: EUVD-2007-5907
Updated: 2026-11-03

GitHub AdvisoriesGHSA-3v5h-fmqv-x9mj No score

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow...

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: GHSA-3v5h-fmqv-x9mj
Weakness: CWE-119
Updated: 2026-11-02

OSV No score

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: CVE-2007-5937
Updated: 2026-11-02

OSVDEBIAN-CVE-2007-5937 No score

Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.

Record: DEBIAN-CVE-2007-5937
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`texlive-bin` Debian:12	before 2007-13	2007-13
`texlive-bin` Debian:13	before 2007-13	2007-13
`texlive-bin` Debian:14	before 2007-13	2007-13

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	affected, aliases, facts, references, title	GitHub Advisories, OSV
Nov 2, 2026	first indexed	CVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5937 is a medium vulnerability (CVSS 6.8) in Tetex, published November 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.15%, the 88th percentile. Fixed in texlive-bin 2007-13.

References

Show 22 moreShow less