CVE-2007-0650: Buffer overflow in the open_sty function in mkind.c for makeindex 2.14 in teTeX might allow user-assisted r...

Security readout for executives and security teams

This is an old teTeX makeindex flaw where processing a crafted long filename could corrupt memory. The reported impact includes file overwrite and possible arbitrary code execution, but the source bundle does not provide a CVSS score or confirm active exploitation. Exposure is most likely on legacy Linux or Unix systems still using teTeX makeindex 2.14, especially where TeX-related files from users, email, shared repositories, or automated document builds are processed. Systems using only trusted local inputs face lower practical risk. Treat this as a legacy software exposure issue. Prioritize systems that still process untrusted or semi-trusted TeX documents, because the possible impact includes code execution, but urgency is reduced by the user-assisted context and lack of known active exploitation evidence. Mitigation focus: Identify whether teTeX makeindex 2.14 is installed or packaged in supported systems.; Check vendor advisories for fixed package versions before deciding remediation.; Upgrade or replace legacy teTeX packages where supported fixes exist..

Prepared

Jun 29, 2026, 07:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.