LaTeX2rtf远程缓冲区溢出漏洞

LaTeX2rtf 1.9.15版本及可能其他的版本存在多个缓冲区溢出漏洞。远程攻击者可以借助（1）expandmacro函数，可能还有(2) Environments和(3) TranslateCommand来执行任意代码。

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: vuldb@securityfocus.com .
@securityfocus.com>

来源: XF
名称: latex2rtf-expandmacro-bo(17460)
链接:http://xforce.iss.net/xforce/xfdb/17460

来源: SECTRACK
名称: 1011367
链接:http://www.securitytracker.com/alerts/2004/Sep/1011367.html

来源: BID
名称: 11233
链接:http://www.securityfocus.com/bid/11233

来源: OSVDB
名称: 10216
链接:http://www.osvdb.org/displayvuln.php?osvdb_id=10216

来源: cvs.sourceforge.net
链接:http://cvs.sourceforge.net/viewcvs.py/latex2rtf/latex2rtf/definitions.c?rev=1.22&view=log

来源: XF
名称: latex2rtf-multiple-bo(17487)
链接:http://xforce.iss.net/xforce/xfdb/17487