This page lists publicly disclosed CVE vulnerabilities affecting tug texlive_2007 (linked via NVD CPE). Each row includes severity scores, summaries, and publication dates to help identify and analyze security issues.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2007-5940 | feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file. | [email protected] | 4.6 | 0.04% | 2007-11-13 | 2026-04-23 |
| CVE-2007-5937 | Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file. | [email protected] | 6.8 | 2.11% | 2007-11-13 | 2026-04-23 |
| CVE-2007-5936 | dvips in teTeX and TeXlive 2007 and earlier allows local users to obtain sensitive information and modify certain data by creating certain temporary files before they are processed by dviljk, which can then be read or modified in place. | [email protected] | 3.6 | 0.09% | 2007-11-13 | 2026-04-23 |
| CVE-2007-5935 | Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag. | [email protected] | 6.8 | 6.35% | 2007-11-13 | 2026-04-23 |