PT-2009-4877 · Mathtex · Mathtex

Chris Evans + 1 · Published 2009-07-14 · Updated 2018-10-10 · CVE-2009-2461

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions mathTeX versions prior to 20090713

Description The issue is related to the insecure creation of temporary files by mathtex.cgi in mathTeX, which has an unspecified impact and can be exploited through local attack vectors.

Recommendations For versions prior to 20090713, update to a version released after 20090713 to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-2461

Affected Products

Mathtex

References · 10

• https://osv.dev/vulnerability/CVE-2009-2461 · Vendor Advisory
• http://vupen.com/english/advisories/2009/1875 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2009-2461 · Vendor Advisory
• http://secunia.com/advisories/35816 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-2461 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2009-2461 · Vendor Advisory
• http://ocert.org/advisories/ocert-2009-010.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51797 · Note
• http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 · Note
• http://securityfocus.com/archive/1/504919/100/0/threaded · Note