CVE-2007-5936
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information...
CVE-2007-5936 is a low vulnerability (CVSS 3.6) in Tetex, published November 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.40%, the 34th percentile. Fixed in texlive-bin 2007-13.
- Severity
- 3.6 LowCVSS 2.0, NVD
- Exploit chance
- 0.40%EPSS, 34th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
2007-13texlive-bin +2 more
Description
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
texlive-binDebian:12 | before 2007-13 | 2007-13 |
texlive-binDebian:13 | before 2007-13 | 2007-13 |
texlive-binDebian:14 | before 2007-13 | 2007-13 |
What each source reports
NVD Score used
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- CVSS 2.0
- 3.6 Low
AV:L/AC:L/Au:N/C:P/I:P/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- Updated
- 2026-11-02
EUVDEUVD-2007-5906No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
EUVD-2007-5906- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8g9-jwcj-22mfNo score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information...
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
GHSA-h8g9-jwcj-22mf- Updated
- 2026-11-02
OSVNo score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
CVE-2007-5936- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-5936No score
dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place.
- Record
DEBIAN-CVE-2007-5936- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| affected, aliases, facts, references, title | GitHub Advisories, OSV | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
bugs.gentoo.org/attachment.cgi?id=135423
issues.rpath.com/browse/RPL-1928
secunia.com/advisories/27672
lists.opensuse.org/opensuse-security-announce/2008-05/msg00000.html
Show 23 moreShow less
usn.ubuntu.com/554-1
osvdb.org/42238
securityfocus.com/bid/26469
security.gentoo.org/glsa/glsa-200805-13.xml
vupen.com/english/advisories/2007/3896
bugzilla.redhat.com/show_bug.cgi?id=368611
redhat.com/archives/fedora-package-announce/2007-November/msg00663.html
wiki.rpath.com/wiki/Advisories:rPSA-2007-0266
securitytracker.com/id?1019058
mandriva.com/security/advisories?name=MDKSA-2007:230
nvd.nist.gov/vuln/detail/CVE-2007-5936
github.com/advisories/GHSA-h8g9-jwcj-22mf
security-tracker.debian.org/tracker/CVE-2007-5936