CVE-2010-1440: Tug Tetex

Medium severity, CVSS 6.8. EPSS: 3.4% chance of exploitation in the next 30 days.

Multiple integer overflows in dvipsk/dospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.

Affected products

• Tug Tetex: any version
• Tug Tex Live: up to and including 2009; version 1996 only; version 1998 only; version 1999 only; version 2000 only; version 2001 only; …

Published 2010-05-07. Last modified 2026-06-16.