Format string error in LaTeX2rtf and Fedora - CVE-2015-8106
Published: April 18, 2016 / Updated: August 9, 2020
Vulnerability identifier: #VU40343
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2015-8106
CWE-ID: CWE-134
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.
Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the keywords command in a crafted TeX file.
Affected software
LaTeX2rtf
Fedora
latex2rtf
Fedora
latex2rtf
How to mitigate CVE-2015-8106
Install update from vendor's website.
latex2rtf - addressed in versions 2.3.10-1.el6, 2.3.10-1.el6.1, 2.3.10-1.el7, 2.3.10-1.fc22, 2.3.10-1.fc23, 2.3.10-1.fc24
External References
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181677.html
- http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181725.html
- http://www.openwall.com/lists/oss-security/2015/11/16/3
- https://bugzilla.redhat.com/show_bug.cgi?id=1282492
- https://sourceforge.net/p/latex2rtf/code/1244/