ISOMAN

CVE

CVE-2011-1400

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.

Severity
MEDIUM
CVSS
6.8
Published
Modified
NVD detailAll CVEs

Linked Releases

DistributionReleaseStatusEvidence
Debian13.5.0 amd64 netinstunknownsource
Debian13.5.0 amd64 edu netinstunknownsource
Debian13.5.0 amd64 mac netinstunknownsource
Debian13.5.0 arm64 netinstunknownsource
Debian13.5.0 amd64 dvd-1unknownsource
Debian13.5.0 arm64 dvd-1unknownsource
Debian13.5.0 amd64 live gnomeunknownsource
Debian13.5.0 amd64 live kdeunknownsource
Debian13.5.0 amd64 live cinnamonunknownsource
Debian13.5.0 amd64 live lxdeunknownsource
Debian13.5.0 amd64 live lxqtunknownsource
Debian13.5.0 amd64 live mateunknownsource
Debian13.5.0 amd64 live xfceunknownsource
Debian13.5.0 amd64 live standardunknownsource
Debian13.5.0 amd64 live debian-juniorunknownsource
Debian13.5.0 armhf netinstunknownsource
Debian13.5.0 ppc64el netinstunknownsource
Debian13.5.0 riscv64 netinstunknownsource
Debian13.5.0 s390x netinstunknownsource
Debian13.5.0 armhf dvd-1unknownsource
Debian13.5.0 ppc64el dvd-1unknownsource
Debian13.5.0 riscv64 dvd-1unknownsource
Debian13.5.0 s390x dvd-1unknownsource
Debian13.6.0 amd64 netinstunknownsource
Debian13.6.0 amd64 edu netinstunknownsource
Debian13.6.0 amd64 mac netinstunknownsource
Debian13.6.0 arm64 netinstunknownsource
Debian13.6.0 amd64 dvd-1unknownsource
Debian13.6.0 arm64 dvd-1unknownsource
Debian13.6.0 amd64 live gnomeunknownsource
Debian13.6.0 amd64 live kdeunknownsource
Debian13.6.0 amd64 live cinnamonunknownsource
Debian13.6.0 amd64 live lxdeunknownsource
Debian13.6.0 amd64 live lxqtunknownsource
Debian13.6.0 amd64 live mateunknownsource
Debian13.6.0 amd64 live xfceunknownsource
Debian13.6.0 amd64 live standardunknownsource
Debian13.6.0 amd64 live debian-juniorunknownsource
Debian13.6.0 armhf netinstunknownsource
Debian13.6.0 ppc64el netinstunknownsource
Debian13.6.0 riscv64 netinstunknownsource
Debian13.6.0 s390x netinstunknownsource
Debian13.6.0 armhf dvd-1unknownsource
Debian13.6.0 ppc64el dvd-1unknownsource
Debian13.6.0 riscv64 dvd-1unknownsource
Debian13.6.0 s390x dvd-1unknownsource

References

  1. http://secunia.com/advisories/43816
  2. http://secunia.com/advisories/43973
  3. http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812
  4. http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log
  5. http://www.debian.org/security/2011/dsa-2198
  6. http://www.securityfocus.com/bid/46986
  7. http://www.ubuntu.com/usn/USN-1103-1
  8. http://www.vupen.com/english/advisories/2011/0731
  9. http://www.vupen.com/english/advisories/2011/0861
  10. https://exchange.xforce.ibmcloud.com/vulnerabilities/66249
  11. http://secunia.com/advisories/43816
  12. http://secunia.com/advisories/43973
  13. http://svn.debian.org/wsvn/debian-tex/?op=comp&compare%5B%5D=%2Ftex-common%2Ftrunk%404781&compare%5B%5D=%2Ftex-common%2Ftrunk%404812
  14. http://svn.debian.org/wsvn/debian-tex/tex-common/trunk/?op=log
  15. http://www.debian.org/security/2011/dsa-2198
  16. http://www.securityfocus.com/bid/46986
  17. http://www.ubuntu.com/usn/USN-1103-1
  18. http://www.vupen.com/english/advisories/2011/0731
  19. http://www.vupen.com/english/advisories/2011/0861
  20. https://exchange.xforce.ibmcloud.com/vulnerabilities/66249