CVE-2007-0650: Makeindex

Medium severity, CVSS 6.8. EPSS: 4.1% chance of exploitation in the next 30 days.

Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function.

Affected products

• Makeindex Makeindex: version 2.14 only

Published 2007-02-01. Last modified 2026-06-16.