PatchTheCVECVE-2002-0836: dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows
CVE-2002-0836 is a high-severity flaw (CVSS 7.5) affecting secure os, mandrake linux, linux. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
Why this priority
- High severity
- EPSS top 5%: very likely to be exploited
- On your watchlist
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 7.5 (High) |
| EPSS exploit chance | 8.0% (top 5%) |
| CISA exploited list | No |
| Published | 2002-10-28 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2002-0836?
secure os: mitigate or apply the listed mitigation; mandrake linux: mitigate or apply the listed mitigation; linux: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2002-0836 being exploited?
CVE-2002-0836 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2002-0836 affect?
CVE-2002-0836 affects secure os, mandrake linux, linux. Severity is high (CVSS 7.5). dvips converter for Postscript files in the tetex package calls the system() function insecurely, which allows remote attackers to execute arbitrary commands via certain print jobs, possibly involving fonts.
How urgent is CVE-2002-0836?
Priority 55/100. High severity; EPSS top 5%: very likely to be exploited; On your watchlist
Related CVEs
- CVE-2002-1232 MEDIUM 5.0 MITIGATE MITIGATE Memory leak in ypdb_open in yp_db.c for ypserv before 2.5 in the NIS package 3.9 and earlier allows remote att
- CVE-2002-0835 MEDIUM 5.0 DOWNGRADE DOWNGRADE Preboot eXecution Environment (PXE) server allows remote attackers to cause a denial of service (crash) via ce
- CVE-2002-0638 MEDIUM 6.2 DOWNGRADE MITIGATE setpwnam.c in the util-linux package, as included in Red Hat Linux 7.3 and earlier, and other operating system
- CVE-2001-1563 HIGH 7.5 DOWNGRADE MITIGATE Unknown vulnerability in Tomcat 3.2.1 running on HP Secure OS for Linux 1.0 allows attackers to access servlet
- CVE-2001-1506 MEDIUM 4.6 MITIGATE Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows ad