CVE-2010-0739
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2)...
6.8 MediumFix available
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
Exploit likelihood
4.92%Down 5.0 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-0739- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-0739- Updated
- 2026-11-02
EUVDEUVD-2010-0765 No score
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
EUVD-2010-0765- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g329-cmhw-r62r No score
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2)...
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
GHSA-g329-cmhw-r62r- Updated
- 2026-11-02
OSV No score
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
CVE-2010-0739- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0739 No score
Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow. NOTE: some of these details are obtained from third party information.
- Record
DEBIAN-CVE-2010-0739- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 |
before 2009-6 | 2009-6 |
texlive-binDebian:13 |
before 2009-6 | 2009-6 |
texlive-binDebian:14 |
before 2009-6 | 2009-6 |
tetexRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
Show 69 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tetex-xdviRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-afmRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-docRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-dvipsRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-fontsRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-latexRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-xdviRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetexRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-afmRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-docRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-dvipsRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-fontsRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-latexRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-xdviRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetexRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0739 is a medium vulnerability (CVSS 6.8) in Tug Tetex, published April 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.92%, the 92nd percentile. Fixed in texlive-bin 2009-6.
References
securityfocus.com/bid/39500
security.gentoo.org/glsa/glsa-201206-28.xml
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11468
lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
lists.fedoraproject.org/pipermail/package-announce/2010-May/041573.html
Show 88 moreShow less
git.frugalware.org/gitweb/gitweb.cgi?p=frugalware-stable.git%3Ba=blob%3Bf=source/xapps-extra/tetex/texlive-CVE-2010-0739-int-overflow.patch
bugzilla.redhat.com/show_bug.cgi?id=572941
ubuntu.com/usn/USN-937-1
secunia.com/advisories/39390
nvd.nist.gov/vuln/detail/CVE-2010-0739
access.redhat.com/errata/RHSA-2010:0399
github.com/advisories/GHSA-g329-cmhw-r62r
security-tracker.debian.org/tracker/CVE-2010-0739
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0399.json
cve.org/CVERecord?id=CVE-2007-5935