[arch-security] [ASA-201605-9] latex2rtf: arbitrary code execution
rgacogne at archlinux.org
Fri May 6 21:47:02 UTC 2016
Arch Linux Security Advisory ASA-201605-9
Date : 2016-05-06
CVE-ID : CVE-2015-8106
Package : latex2rtf
Type : arbitrary code execution
Remote : Yes
Link : https://wiki.archlinux.org/index.php/CVE
The package latex2rtf before version 2.3.10-1 is vulnerable to arbitrary
Upgrade to 2.3.10-1.
# pacman -Syu "latex2rtf>=2.3.10-1"
The problem has been fixed upstream in version 2.3.10.
A format string vulnerability was found in the CmdKeywords() function,
where the user-controlled variable 'keywords' is passed as a format
argument to vnsprintf(), when processing the \keywords command in a TeX
An attacker can execute arbitrary code on the affected host by supplying
a crafted TeX file.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 801 bytes
Desc: OpenPGP digital signature
More information about the arch-security