Bug 20770

Chris Evans has reported some vulnerabilities in mimeTeX, which can be exploited by malicious people to disclose sensitive information or compromise a vulnerable system.

1) Multiple boundary errors when processing TeX input can be exploited to cause buffer overflows via e.g. overly long strings passed in "\picture", \circle", or "\input" expressions.

2) Multiple errors when handling the "\environ", "\input", and "\counter" directives can be exploited to disclose sensitive information.

Problem fixed in version 1.71