漏洞类别:Ubuntu
漏洞等级:
漏洞信息
It was discovered that TeX Live incorrectly handled certain system commands.
漏洞危害
If a user were tricked into processing a specially crafted TeX file, a remote attacker could execute arbitrary code.
解决方案
Refer to Ubuntu advisory USN-3401-1 for affected packages and patching details, or update with your package manager.
Patch:
Following are links for downloading patches to fix the vulnerabilities:
USN-3401-1: 14.04 (Kylin) on src (texlive-base)
USN-3401-1: 14.04 (Kylin) on src (texlive-latex-base)
0daybank
文章评论