CVE-2010-0829
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers...
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
Exploit likelihood
What each source reports
NVD Score used
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
CVE-2010-0829- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
CVE-2010-0829- Updated
- 2026-11-02
EUVDEUVD-2010-0854 No score
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
EUVD-2010-0854- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-838g-ff3f-wpf6 No score
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers...
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
GHSA-838g-ff3f-wpf6- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
CVE-2010-0829- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-0829 No score
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- Record
DEBIAN-CVE-2010-0829- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
dvipngDebian:12 |
before 1.13-1 | 1.13-1 |
dvipngDebian:13 |
before 1.13-1 | 1.13-1 |
dvipngDebian:14 |
before 1.13-1 | 1.13-1 |
dvipngDebian:5.0 |
before 1.11-1+lenny1, plus listed versions 1.11-1 |
1.11-1+lenny1 |
tetexRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-afmRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-debuginfoRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-docRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-dvipsRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-fontsRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
Show 10 moreShow less
| Package | Affected | Fixed |
|---|---|---|
tetex-latexRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-xdviRed Hat:enterprise_linux:5::client From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetexRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-afmRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-debuginfoRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-docRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-dvipsRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-fontsRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-latexRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
tetex-xdviRed Hat:enterprise_linux:5::server From an advisory covering 17 CVEs |
before 0:3.0-33.8.el5_5.5 | 0:3.0-33.8.el5_5.5 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-0829 is a medium vulnerability (CVSS 4.3) in Jan-ake Larsson Dvipng, published May 7, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.54%, the 91st percentile. Fixed in dvipng 1.13-1.
References
secunia.com/advisories/39914
vupen.com/english/advisories/2010/1219
lists.fedoraproject.org/pipermail/package-announce/2010-May/041587.html
lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9718
Show 74 moreShow less
debian.org/security/2010/dsa-2048
bugzilla.redhat.com/show_bug.cgi?id=573999
ubuntu.com/usn/USN-936-1
nvd.nist.gov/vuln/detail/CVE-2010-0829
github.com/advisories/GHSA-838g-ff3f-wpf6
security-tracker.debian.org/tracker/CVE-2010-0829
access.redhat.com/errata/RHSA-2010:0400
security.access.redhat.com/data/csaf/v2/advisories/2010/rhsa-2010_0400.json
cve.org/CVERecord?id=CVE-2009-0146