CVE-2016-10243

TeX Live allows remote attackers to execute arbitrary commands by leveraging inclusion of mpost in shell_escape_commands in the texmf.cnf config file.

Date published : 2017-05-02

http://www.securityfocus.com/bid/96593

https://www.tug.org/svn/texlive?view=revision&revision=42605