Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted remote attackers to overwrite files and possibly execute arbitrary code via a long filename. NOTE: other overflows exist but might not be exploitable, such as a heap-based overflow in the check_idx function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Tetex mkind.c命令行参数缓冲区溢出漏洞
Vulnerability Description
teTeX是Linux上最常用的编辑器之一，几乎所有的Linux发行版都内置的这个软件。 teTeX在处理超长的路径名参数时存在缓冲区溢出漏洞，本地攻击者可能利用此漏洞提升自己的权限。 teTeX的mkind.c文件中的open_sty函数没有正确验证用户通过"-s"选项提供的参数数据： 150 /* style file */ 151 case 's': 152 argc--; 153 if (argc <= 0) 154 FATAL("Expected -s <stylefile>\n",""); 1
CVSS Information
N/A
Vulnerability Type
N/A