CVE-2015-8106

7.8 HIGH

Published: April 18, 2016 Modified: May 06, 2026

Description

Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the \keywords command in a crafted TeX file.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181677.html

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181725.html

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2015/11/16/3

Source: cve@mitre.org

https://bugzilla.redhat.com/show_bug.cgi?id=1282492

Source: cve@mitre.org

https://sourceforge.net/p/latex2rtf/code/1244/

Source: cve@mitre.org

http://lists.fedoraproject.org/pipermail/package-announce/2016-April/181276.html