VDB
CVE-2007-0650
CVE-2007-0650
PUBLISHED
CVSS 6.800000190734863 MEDIUM
Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function.
EPSS 4.07% · 90.5th percentile
Risk Scores
CVSS 2.0
6.800000190734863
EPSS Score
4.07%
90.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| makeindex | makeindex | 2.14 |
| n/a | n/a | n/a |
Timeline
- Feb 1, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Sep 5, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
- Sep 21, 2023 EPSS Score
References
- tetex-makeindex-opensty-bo(32284) vdb
- https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=225491 url
- GLSA-200709-17 vendor-advisory
- ADV-2007-1706 vdb
- MDKSA-2007:109 vendor-advisory
- 26982 third-party-advisory
- 23872 vdb
- GLSA-200805-13 vendor-advisory
- 30168 third-party-advisory
- GLSA-200711-34 vendor-advisory
- https://issues.rpath.com/browse/RPL-1036 url
- https://nvd.nist.gov/vuln/detail/CVE-2007-0650 advisory