VDB
ALINUX2-SA-2020%3A0086
ALINUX2-SA-2020%3A0086
PUBLISHED
CVSS 7 HIGH
Package updates are available for Alibaba Cloud Linux 2.1903 that fix the following vulnerabilities: CVE-2018-17407: An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.
Risk Scores
CVSS 3.0
7
CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Alibaba Cloud | texlive |
Timeline
- Apr 9, 2020 CVE Published
- Apr 9, 2020 CVE Updated