CVE-2016-10243 PUBLISHED

TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.

EPSS 9.88% · 92.9th percentile

Risk Scores

EPSS Score
9.88%
92.9th percentile

Affected Products

VendorProductVersions
Ubuntu:14.04:LTStexlive-base0, 2013.20130722-1, 2013.20131010-2
Ubuntu:16.04:LTStexlive-base0, 2015.20150625-1ubuntu1, 2015.20151116-1ubuntu1

Timeline

References

Open in Interactive Console →