RHEL 2.1 / 3 / 4 : tetex (RHSA-2006:0160)

Critical Nessus Plugin ID 20752

Synopsis

The remote Red Hat host is missing one or more security updates.

Description

Updated tetex packages that fix several integer overflows are now available.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

TeTeX is an implementation of TeX. TeX takes a text file and a set of formatting commands as input and creates a typesetter-independent .dvi (DeVice Independent) file as output.

Several flaws were discovered in the teTeX PDF parsing library. An attacker could construct a carefully crafted PDF file that could cause teTeX to crash or possibly execute arbitrary code when opened. The Common Vulnerabilities and Exposures project assigned the names CVE-2005-3191, CVE-2005-3192, CVE-2005-3193, CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, CVE-2005-3627 and CVE-2005-3628 to these issues.

Users of teTeX should upgrade to these updated packages, which contain backported patches and are not vulnerable to these issues.

Solution

Update the affected packages.

See Also

https://access.redhat.com/security/cve/cve-2005-3191

https://access.redhat.com/security/cve/cve-2005-3192

https://access.redhat.com/security/cve/cve-2005-3193

https://access.redhat.com/security/cve/cve-2005-3624

https://access.redhat.com/security/cve/cve-2005-3625

https://access.redhat.com/security/cve/cve-2005-3626

https://access.redhat.com/security/cve/cve-2005-3627

https://access.redhat.com/security/cve/cve-2005-3628

https://access.redhat.com/errata/RHSA-2006:0160

Plugin Details

Severity: Critical

ID: 20752

File Name: redhat-RHSA-2006-0160.nasl

Version: 1.24

Type: local

Agent: unix

Published: 2006/01/20

Updated: 2019/10/25

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:redhat:enterprise_linux:tetex, p-cpe:/a:redhat:enterprise_linux:tetex-afm, p-cpe:/a:redhat:enterprise_linux:tetex-doc, p-cpe:/a:redhat:enterprise_linux:tetex-dvilj, p-cpe:/a:redhat:enterprise_linux:tetex-dvips, p-cpe:/a:redhat:enterprise_linux:tetex-fonts, p-cpe:/a:redhat:enterprise_linux:tetex-latex, p-cpe:/a:redhat:enterprise_linux:tetex-xdvi, cpe:/o:redhat:enterprise_linux:2.1, cpe:/o:redhat:enterprise_linux:3, cpe:/o:redhat:enterprise_linux:4

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list, Host/cpu

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2006/01/19

Vulnerability Publication Date: 2005/12/06

Reference Information

CVE: CVE-2005-3191, CVE-2005-3192, CVE-2005-3193, CVE-2005-3624, CVE-2005-3625, CVE-2005-3626, CVE-2005-3627, CVE-2005-3628

BID: 15721, 15725, 15726, 15727, 16143

RHSA: 2006:0160