| Vulnerability Name: | CVE-2009-1382 (CCN-51794) | ||||||||||||||||||||
| Assigned: | 2009-07-13 | ||||||||||||||||||||
| Published: | 2009-07-13 | ||||||||||||||||||||
| Updated: | 2018-10-10 | ||||||||||||||||||||
| Summary: | Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags. | ||||||||||||||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||||||||||||||
| CVSS v2 Severity: | 10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C) 7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.0 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
| ||||||||||||||||||||
| Vulnerability Type: | CWE-119 | ||||||||||||||||||||
| Vulnerability Consequences: | Gain Access | ||||||||||||||||||||
| References: | Source: MITRE Type: CNA CVE-2009-1382 Source: MISC Type: Exploit, Patch http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578 Source: FEDORA Type: UNKNOWN FEDORA-2010-6546 Source: MISC Type: Exploit http://scary.beasts.org/security/CESA-2009-009.html Source: CCN Type: SA35752 mimeTeX Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 35752 Source: CCN Type: SA35816 mathTeX Multiple Vulnerabilities Source: SECUNIA Type: Vendor Advisory 35816 Source: DEBIAN Type: DSA-1917 mimetex -- several vulnerabilities Source: CCN Type: John Forkosh Associates Web site mimeTeX quickstart Source: CCN Type: oCERT Advisories #2009-010 mimeTeX and mathTeX buffer overflows and command injection Source: MISC Type: UNKNOWN http://www.ocert.org/advisories/ocert-2009-010.html Source: CCN Type: OSVDB ID: 56098 mimeTeX mimetex.cgi Multiple Tags Arbitrary Code Execution Source: BUGTRAQ Type: UNKNOWN 20090713 [oCERT-2009-010] mimeTeX and mathTeX buffer overflows and commandinjection Source: CCN Type: BID-36631 mimeTeX Multiple Stack Buffer Overflow Vulnerabilities Source: CCN Type: USN-844-1 mimeTeX vulnerabilities Source: VUPEN Type: Patch, Vendor Advisory ADV-2009-1875 Source: VUPEN Type: UNKNOWN ADV-2010-0877 Source: XF Type: UNKNOWN mimetex-mimetex-bo(51794) Source: XF Type: UNKNOWN mimetex-mimetex-bo(51794) | ||||||||||||||||||||
| Vulnerable Configuration: | Configuration 1: Denotes that component is vulnerable | ||||||||||||||||||||
| Oval Definitions | |||||||||||||||||||||
| |||||||||||||||||||||
| BACK | |||||||||||||||||||||