PT-2009-4877 · Mathtex · Mathtex

Chris Evans + 1 · Publicado 2009-07-14 · Atualizado 2018-10-10 · CVE-2009-2461

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mathTeX versions prior to 20090713

Description The issue is related to the insecure creation of temporary files by mathtex.cgi in mathTeX, which has an unspecified impact and can be exploited through local attack vectors.

Recommendations For versions prior to 20090713, update to a version released after 20090713 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-2461

Produtos afetados

Mathtex

Referências · 10

• http://ocert.org/advisories/ocert-2009-010.html · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51797 · Nota
• https://osv.dev/vulnerability/CVE-2009-2461 · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/1875 · Aviso do Fabricante
• http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 · Nota
• https://security-tracker.debian.org/tracker/CVE-2009-2461 · Aviso do Fabricante
• http://secunia.com/advisories/35816 · Aviso do Fabricante
• http://securityfocus.com/archive/1/504919/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2461 · Nota de Segurança
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-2461 · Aviso do Fabricante