123 matches found
Mathtex Security Breach
Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and earlier versions, which stems from the presence of a discovery infinite loop problem. A remote attacker can exploit this vulnerability to consume CPU resources via a crafted...
PT-2024-14320 · Mathtex +1 · Mathtex +1
Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to execute arbitrary code via a crafted string in the application URL. This is due to a Stack Overflow vulnerability in the validate function. Recommendations:...
CVE-2023-51886
Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...
PT-2024-14319 · Mathtex +1 · Mathtex +1
Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: The issue allows a remote attacker to cause a denial of service via a crafted string in the application URL, specifically exploiting a Buffer Overflow vulnerability in the nomath function...
CVE-2023-51885
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
CVE-2023-51890
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
CVE-2023-51887
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
PT-2024-14321 · Mathtex +1 · Mathtex +1
Name of the Vulnerable Software and Affected Versions: Mathtex versions 1.05 and earlier Description: An infinite loop issue in the software allows remote attackers to consume CPU resources via a crafted string in the application URL. This can lead to potential denial-of-service conditions...
Mathtex Security Breach
Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from the presence of a buffer overflow vulnerability. A remote attacker can exploit this vulnerability to execute arbitrary code via the length of...
CVE-2023-51885
CVE-2023-51885 affects Mathtex v1.05 and earlier. The vulnerability is a buffer overflow in how the LaTeX string length is processed, enabling a remote attacker to execute arbitrary code. The provided connected documents confirm the existence and impact but do not include concrete remediation ste...
CVE-2023-51885: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
CVE-2023-51885
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
PT-2024-14316
Name of the Vulnerable Software and Affected Versions Mathtex versions 1.05 and earlier Description The issue allows a remote attacker to execute arbitrary code via the length of the LaTeX string component. This can be exploited to gain unauthorized access and control over the system...
CVE-2023-51886
Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...
CVE-2023-51890
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
CVE-2023-51886
CVE-2023-51886 is a confirmed buffer overflow vulnerability in the Mathtex package (versions 1.05 and earlier) affecting the main() function and the use of the \convertpath feature. Multiple connected sources (Red Hat, Ubuntu, OSV, Debian, UBUNTU OSV, Nessus plugin entry) describe that a remote a...
Buffer Overflow
mathtex is vulnerable to buffer overflow. The vulnerability is caused by improper bounds checking by the mathtex.cgi script. An attacker may inflict a buffer overflow and execute arbitrary code on the system or cause the application to crash...
Insecure Temporary File
mathtex is vulnerable to insecure temporary file. An attacker can gain access to the temporary files and use it for local attack vectors...
mathTeX mathtex.cgi getdirective Function dpi Tag Arbitrary Code Execution
The remote web server hosts mathTeX, a CGI script for displaying math on the web. The version of this application installed on the remote host fails to sanitize input via the 'dpi' or 'density' tags in an expression of shell metacharacters in the 'getdirective' function before using it in a call ...
