CVE-2007-5940

NONE EPSS 32.3%

Published Nov 13, 200718y ago · Modified Jun 16, 20262w ago

Published Nov 13, 2007 18y ago

Last Modified Jun 16, 2026 2w ago

Description

feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.

Threat Intelligence

EPSS Exploit Probability

32.3% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-59

Affected Products 1

Vendor	Product	Version	Range
tug	texlive_2007	*	any

References 7

bugs.gentoo.org http://bugs.gentoo.org/show_bug.cgi?id=198231
osvdb.org http://osvdb.org/42397
secunia.com http://secunia.com/advisories/27737
secunia.com http://secunia.com/advisories/27739
security.gentoo.org http://security.gentoo.org/glsa/glsa-200711-32.xml
securityfocus.com http://www.securityfocus.com/bid/26507
vupen.com http://www.vupen.com/english/advisories/2007/3974

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.