[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQX3oXMnsNoqspSBxA6cAunZgOoCNjAcYV27yvAcICLo":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":38,"kevVulnerabilities":96,"topProductsByCves":97,"seoMetadata":102,"meta":111},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":37},32700,"tug",4,17,0,40,"2023-05-20","t",[16,21,27,31],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},165715,"tex_live",32,8,{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},165714,"tetex",1,5,"2011-01-07",{"id":28,"product_name":29,"version_count":11,"cve_count":9,"kev_count":11,"last_cve_update":30},165717,"texlive_2007","2007-11-13",{"id":32,"product_name":33,"version_count":34,"cve_count":35,"kev_count":11,"last_cve_update":36},165716,"texlive",7,3,"2017-10-06","Tug is a technology vendor with 4 tracked products and 17 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[39,47,55,62,68,72,76,80,84,90],{"cveId":40,"description":41,"publishedDate":26,"cvssScore":42,"cvssVersion":43,"severity":44,"isKev":45,"epssScore":46},"CVE-2010-2642","Heap-based buffer overflow in the AFM font parser in the dvi-backend component in Evince 2.32 and earlier, teTeX 3.0, t1lib 5.1.2, and possibly other products allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted font in conjunction with a DVI file that is processed by the thumbnailer.",7.6,"v2","High",false,0.1427,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":52,"severity":53,"isKev":45,"epssScore":54},"CVE-2016-10243","TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.","2017-05-02",9.8,"v3.0","Critical",0.07146,{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":61},"CVE-2010-0739","Integer overflow in the predospecial function in dospecial.c in dvips in (1) TeX Live and (2) teTeX might allow user-assisted remote attackers to execute arbitrary code via a crafted DVI file that triggers a heap-based buffer overflow.  NOTE: some of these details are obtained from third party information.","2010-04-16",6.8,"Medium",0.04918,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":67},"CVE-2010-0829","Multiple array index errors in set.c in dvipng 1.11 and 1.12, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed DVI file.","2010-05-07",4.3,0.04539,{"cveId":69,"description":70,"publishedDate":65,"cvssScore":59,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":71},"CVE-2010-0827","Integer overflow in dvips in TeX Live 2009 and earlier, and teTeX, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted virtual font (VF) file associated with a DVI file.",0.04439,{"cveId":73,"description":74,"publishedDate":30,"cvssScore":59,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":75},"CVE-2007-5935","Stack-based buffer overflow in hpc.c in dvips in teTeX and TeXlive 2007 and earlier allows user-assisted attackers to execute arbitrary code via a DVI file with a long href tag.",0.03953,{"cveId":77,"description":78,"publishedDate":65,"cvssScore":59,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":79},"CVE-2010-1440","Multiple integer overflows in dvipsk\u002Fdospecial.c in dvips in TeX Live 2009 and earlier, and teTeX, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a special command in a DVI file, related to the (1) predospecial and (2) bbdospecial functions, a different vulnerability than CVE-2010-0739.",0.0343,{"cveId":81,"description":82,"publishedDate":30,"cvssScore":59,"cvssVersion":43,"severity":60,"isKev":45,"epssScore":83},"CVE-2007-5937","Multiple buffer overflows in dvi2xx.c in dviljk in teTeX and TeXlive 2007 and earlier might allow user-assisted attackers to execute arbitrary code via a crafted DVI input file.",0.03151,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":88,"cvssVersion":52,"severity":44,"isKev":45,"epssScore":89},"CVE-2018-17407","An issue was discovered in t1_check_unusual_charstring functions in writet1.c files in TeX Live before 2018-09-21. A buffer overflow in the handling of Type 1 fonts allows arbitrary code execution when a malicious font is loaded by one of the vulnerable tools: pdflatex, pdftex, dvips, or luatex.","2018-09-23",7.8,0.02058,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":94,"cvssVersion":52,"severity":44,"isKev":45,"epssScore":95},"CVE-2017-17513","TeX Live through 20170524 does not validate strings before launching the program specified by the BROWSER environment variable, which might allow remote attackers to conduct argument-injection attacks via a crafted URL, related to linked_scripts\u002Fcontext\u002Fstubs\u002Funix\u002Fmtxrun, texmf-dist\u002Fscripts\u002Fcontext\u002Fstubs\u002Fmswin\u002Fmtxrun.lua, and texmf-dist\u002Ftex\u002Fluatex\u002Flualibs\u002Flualibs-os.lua.","2017-12-14",8.8,0.01281,[],[98,99,100,101],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":11,"last_cve_update":13},{"id":22,"product_name":23,"version_count":24,"cve_count":25,"kev_count":11,"last_cve_update":26},{"id":28,"product_name":29,"version_count":11,"cve_count":9,"kev_count":11,"last_cve_update":30},{"id":32,"product_name":33,"version_count":34,"cve_count":35,"kev_count":11,"last_cve_update":36},{"title":103,"metaDescription":104,"keywords":105,"structuredData":106},"Tug - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Tug covering 4 products with 17 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Tug vulnerabilities, Tug security, Tug CVE, Tug threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":107,"@type":108,"name":109,"description":104,"url":110},"https:\u002F\u002Fschema.org","Organization","Tug","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Ftug",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":112,"apiVersion":113},"2026-10-17T15:23:22.106Z","3.0"]