CVE-2010-0827
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to...
6.8 MediumFix available
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
Exploit likelihood
4.44%Down 2.2 points since Feb 4, 2022
What each source reports
NVD Score used
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
CVE-2010-0827- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
CVE-2010-0827- Updated
- 2026-11-02
EUVDEUVD-2010-0853 No score
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
EUVD-2010-0853- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-8p99-hj29-qxw6 No score
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to...
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
GHSA-8p99-hj29-qxw6- Updated
- 2026-11-02
OSV No score
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
CVE-2010-0827- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0827 No score
Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.
- Record
DEBIAN-CVE-2010-0827- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 |
before 2009-6 | 2009-6 |
texlive-binDebian:13 |
before 2009-6 | 2009-6 |
texlive-binDebian:14 |
before 2009-6 | 2009-6 |
tetexRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
Show 53 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tetex-xdviRed Hat:enterprise_linux:4::as From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::desktop From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::es From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-afmRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-debuginfoRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-docRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-dvipsRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-fontsRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-latexRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetex-xdviRed Hat:enterprise_linux:4::ws From an advisory covering 17 CVEs |
before 0:2.0.2-22.0.1.EL4.16 | 0:2.0.2-22.0.1.EL4.16 |
tetexRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::as From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::desktop From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::es From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetexRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-afmRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-debuginfoRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-dvipsRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-fontsRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-latexRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
tetex-xdviRed Hat:enterprise_linux:3::ws From an advisory covering 6 CVEs |
before 0:1.0.7-67.19 | 0:1.0.7-67.19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0827 is a medium vulnerability (CVSS 6.8) in Tug Tetex, published May 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.44%, the 91st percentile. Fixed in texlive-bin 2009-6.
References
tug.org/svn/texlive/trunk/Build/source/texk/dvipsk/ChangeLog?view=log
securityfocus.com/bid/39971
security.gentoo.org/glsa/glsa-201206-28.xml
lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
Show 76 moreShow less
security-tracker.debian.org/tracker/CVE-2010-0827
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10052
bugzilla.redhat.com/show_bug.cgi?id=572914
ubuntu.com/usn/USN-937-1
nvd.nist.gov/vuln/detail/CVE-2010-0827
github.com/advisories/GHSA-8p99-hj29-qxw6
access.redhat.com/errata/RHSA-2010:0399
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0399.json
cve.org/CVERecord?id=CVE-2007-5935