CVE-2010-0829
No CVSS score yet. EPSS 4.5% chance of exploitation in the next 30 days.
Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.
- EPSS
- 4.5% chance of exploitation in the next 30 days; higher than 91% of CVEs (scores of 2026-10-31)
- CWE
- CWE-119
- Published
- Modified
- Record from
- the NVD, synced
Affected
- jan-ake_larsson:dvipng
- tug:tetex
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041587.html
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html
- http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html
- http://secunia.com/advisories/39914
- http://www.debian.org/security/2010/dsa-2048