The getdirective function in mathTeX allows remote command execution via shell metacharacters in the dpi tag
Reporter | Title | Published | Views | Family All 9 |
---|---|---|---|---|
![]() | CVE-2009-1383 | 14 Jul 200920:16 | – | cvelist |
![]() | Code injection | 14 Jul 200920:30 | – | prion |
![]() | Remote Code Execution (RCE) | 6 Dec 202003:34 | – | veracode |
![]() | mathTeX mathtex.cgi getdirective Function dpi Tag Arbitrary Code Execution | 6 Oct 201000:00 | – | nessus |
![]() | CVE-2009-1383 | 14 Jul 200920:30 | – | cve |
![]() | CVE-2009-1383 | 14 Jul 200920:30 | – | nvd |
![]() | CVE-2009-1383 | 14 Jul 200900:00 | – | ubuntucve |
![]() | Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl) | 16 Jul 200900:00 | – | securityvulns |
![]() | [oCERT-2009-010] mimeTeX and mathTeX buffer overflows and command injection | 16 Jul 200900:00 | – | securityvulns |
OS | OS Version | Architecture | Package | Package Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | mathtex | 1.03-1 | mathtex_1.03-1_all.deb |
Debian | 11 | all | mathtex | 1.03-1 | mathtex_1.03-1_all.deb |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo