CVE-2010-0827: Tug Tetex

Medium severity, CVSS 6.8. EPSS: 4.4% chance of exploitation in the next 30 days.

Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.

Affected products

• Tug Tetex: any version
• Tug Tex Live: up to and including 2009; version 1996 only; version 1998 only; version 1999 only; version 2000 only; version 2001 only; …

Published 2010-05-07. Last modified 2026-06-16.