Search for vulnerabilities
| Vulnerability ID | VCID-bn5s-9aus-aaag |
| Aliases |
CVE-2007-5936
|
| Summary | dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place. |
| Status | Published |
| Exploitability | 0.5 |
| Weighted Severity | 3.2 |
| Risk | 1.6 |
| Affected and Fixed Packages | Package Details |
| CWE-264 | Permissions, Privileges, and Access Controls |
| CWE-377 | Insecure Temporary File |
| Exploitability (E) | Access Vector (AV) | Access Complexity (AC) | Authentication (Au) | Confidentiality Impact (C) | Integrity Impact (I) | Availability Impact (A) |
|---|---|---|---|---|---|---|
high functional unproven proof_of_concept not_defined |
local adjacent_network network |
high medium low |
multiple single none |
none partial complete |
none partial complete |
none partial complete |
| Percentile | 0.10982 |
| EPSS Score | 0.00044 |
| Published At | Nov. 1, 2024, midnight |
| Date | Actor | Action | Source | VulnerableCode Version |
|---|---|---|---|---|
| There are no relevant records. | ||||