CVE-2004-2167 Memory corruption in n/a
Remote attackers can execute arbitrary code via buffer overflows in LaTeX2rtf when processing malicious documents.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- Available
What is CVE-2004-2167?
CVE-2004-2167 is a high-severity memory corruption vulnerability in n/a, published on 10 Jul 2005. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Multiple buffer overflows in LaTeX2rtf 1.9.15, and possibly other versions, allow remote attackers to execute arbitrary code via (1) the expandmacro function, and possibly (2) Environments and (3) TranslateCommand.
Which versions are affected by CVE-2004-2167?
It affects 1 product.
Products include Latex2rtf Latex2rtf.
How do I fix CVE-2004-2167?
Upgrade to a fixed version.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2004-2167 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-2167 exists.
Public exploit code: 1 Exploit-DB entry and 1 proofs of concept on GitHub.
Sources
Also known as DEBIAN-CVE-2004-2167, GHSA-ww4g-p7g5-wh4f.