CVE:CVE-2018-17407
CNNVD:CNNVD-201809-1030
TeX Live是国际TeX用户组织TUG开发的一套TeX电子排版系统。该系统提供排版语言、宏定义等功能。
TeX Live 2018-09-21之前版本中的writet1.c文件的‘t1_check_unusual_charstring’函数存在缓冲区溢出漏洞。攻击者可借助恶意的字体（.pfb）利用该漏洞执行任意代码。
solution:Upgrade tug tex_live to a higher version than 2018-09-21,and avoid the version (,2018-09-21); Upgrade canonical ubuntu_linux to a higher version than 14.04,16.04,18.04,18.10,and avoid the version 14.04,16.04,18.04,18.10; Upgrade debian debian_linux to a higher version than 8.0,9.0,and avoid the version 8.0,9.0