CVE-2007-5937
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow...
CVE-2007-5937 is a medium vulnerability (CVSS 6.8) in Tetex, published November 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.15%, the 88th percentile. Fixed in texlive-bin 2007-13.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 3.15%EPSS, 88th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2007-13texlive-bin +2 more
Description
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 | before 2007-13 | 2007-13 |
texlive-binDebian:13 | before 2007-13 | 2007-13 |
texlive-binDebian:14 | before 2007-13 | 2007-13 |
What each source reports
NVD Score used
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
CVE-2007-5937- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
CVE-2007-5937- Updated
- 2026-11-02
EUVDEUVD-2007-5907No score
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
EUVD-2007-5907- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3v5h-fmqv-x9mjNo score
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow...
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
GHSA-3v5h-fmqv-x9mj- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVNo score
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
CVE-2007-5937- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5937No score
Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.
- Record
DEBIAN-CVE-2007-5937- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.gentoo.org/attachment.cgi?id=135423
issues.rpath.com/browse/RPL-1928
secunia.com/advisories/27672
lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
Show 22 moreShow less
usn.ubuntu.com/554-1
securityfocus.com/bid/26469
security.gentoo.org/glsa/glsa-200805-13.xml
vupen.com/english/advisories/2007/3896
bugzilla.redhat.com/show_bug.cgi?id=368641
redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
securitytracker.com/id?1019058
mandriva.com/security/advisories?name=MDKSA-2007:230
nvd.nist.gov/vuln/detail/CVE-2007-5937
github.com/advisories/GHSA-3v5h-fmqv-x9mj
security-tracker.debian.org/tracker/CVE-2007-5937