Every CVE Search/ Get API key

CVE-2007-5935

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user...

6.8 MediumFix available

CVE-2007-5935 is a medium vulnerability (CVSS 6.8) in Tetex, published November 13, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.95%, the 90th percentile. Fixed in texlive-bin 2007.dfsg.1-1.

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Exploit likelihood

3.95%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 6.8

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
CVE-2007-5935
CVSS 2.0
6.8 MediumAV:N/AC:M/Au:N/C:P/I:P/A:P
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
CVE-2007-5935
Updated
2026-11-02
EUVDEUVD-2007-5905 No score

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
EUVD-2007-5905
Updated
2026-11-03
GitHub AdvisoriesGHSA-m7c5-9grq-3jqp No score

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user...

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
GHSA-m7c5-9grq-3jqp
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
CVE-2007-5935
Updated
2026-11-02
OSVDEBIAN-CVE-2007-5935 No score

Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.

Record
DEBIAN-CVE-2007-5935
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
texlive-bin
Debian:12
 before 2007.dfsg.1-1
2007.dfsg.1-1
texlive-bin
Debian:13
 before 2007.dfsg.1-1
2007.dfsg.1-1
texlive-bin
Debian:14
 before 2007.dfsg.1-1
2007.dfsg.1-1
texlive-bin
Debian:5.0
 before 2007-14+lenny1
2007-14+lenny1
tetex
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
Show 54 moreShow less
Affected packages
PackageAffectedFixed
tetex-latex
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::as
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::desktop
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::es
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-afm
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-debuginfo
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-doc
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-dvips
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-fonts
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-latex
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex-xdvi
Red Hat:enterprise_linux:4::ws
 before 0:2.0.2-22.0.1.EL4.16
0:2.0.2-22.0.1.EL4.16
tetex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-afm
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-debuginfo
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-dvips
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-fonts
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-latex
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-xdvi
Red Hat:enterprise_linux:3::as
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-afm
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-dvips
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-fonts
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-latex
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-xdvi
Red Hat:enterprise_linux:3::desktop
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-afm
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-debuginfo
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-dvips
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-fonts
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-latex
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-xdvi
Red Hat:enterprise_linux:3::es
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-afm
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-debuginfo
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-dvips
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-fonts
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-latex
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19
tetex-xdvi
Red Hat:enterprise_linux:3::ws
 before 0:1.0.7-67.19
0:1.0.7-67.19

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02affected, aliases, facts, references, titleGitHub Advisories, OSV
2026-11-02createdCVE List, NVD

References

Show 93 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open