CVE-2007-5940: Tug Texlive 2007

Medium severity, CVSS 4.6. EPSS: 0.4% chance of exploitation in the next 30 days.

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.

Affected products

• Tug Texlive 2007: any version

Published 2007-11-13. Last modified 2026-06-16.