CVE catalog

CVE-2015-8106

latex2rtf: CVE-2015-8106

[CVE catalog]

Severity
Low
Published
Source
[NVD] · [CVE record]
EPSS
3.56% · Oct 25, 2026

Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers to execute arbitrary code via format string specifiers in the \keywords command in a crafted TeX file.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlatex2rtfsid2.3.18a-5fixed
Debianlatex2rtfforky2.3.18a-5fixed
Debianlatex2rtftrixie2.3.18a-5fixed
Debianlatex2rtfbookworm2.3.18a-3fixed
Ubuntulatex2rtf16.042.3.8-1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlatex2rtfsourcesid2.3.10-1unimportantNot reported[805398]
Debianlatex2rtfsourceforky2.3.10-1unimportantNot reported[805398]
Debianlatex2rtfsourcetrixie2.3.10-1unimportantNot reported[805398]
Debianlatex2rtfsourcebookworm2.3.10-1unimportantNot reported[805398]

[Debian bug #805398]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [latex2rtf]Fixed
    Details (2)

    • 2.3.18a-3 · amd64 · bookworm

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · bookworm; dsa · latex2rtf · debian · 12

    • 2.3.18a-3 · arm64 · bookworm

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · bookworm; dsa · latex2rtf · debian · 12

  • [latex2rtf-doc]Fixed

    Source package: [latex2rtf]

    Details (2)

    • 2.3.18a-3 · all · bookworm

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · bookworm; dsa · latex2rtf · debian · 12

    • 2.3.18a-3 · all · bookworm

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · bookworm; dsa · latex2rtf · debian · 12

[Debian 13 (Trixie)]

  • [latex2rtf]Fixed

    Source package: [latex2rtf]

    Details (2)

    • 2.3.18a-5 · amd64 · trixie

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · 13

    • 2.3.18a-5+b1 · arm64 · trixie

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · 13

  • [latex2rtf-doc]Fixed

    Source package: [latex2rtf]

    Details (2)

    • 2.3.18a-5 · all · trixie

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · 13

    • 2.3.18a-5 · all · trixie

      Fixed · Fixed: 2.3.10-1

      dsa · latex2rtf · debian · 13

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]