CVE-2011-1400

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux…

published March 25, 2011

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux squeeze, Ubuntu 10.10 and 10.04 LTS, and possibly other operating systems lists certain programs, which might allow remote attackers to execute arbitrary code via a crafted TeX document.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04061 · 90.6th percentile
Published
2011-03-25T19:00Z
EPSS history
Timeline
  • 25 MAR 19:00Z
    The default configuration of the shell_escape_commands directive in conf/texmf.d/95NonPath.cnf in the tex-common package before 2.08.1 in Debian GNU/Linux…
    cvelistv5