123 matches found
CVE-2023-51888
CVE-2023-51888 describes a buffer overflow in the nomath() function of Mathtex
CVE-2023-51887
The CVE-2023-51887 issue affects Mathtex versions 1.05 and earlier and is a Command Injection vulnerability. A remote attacker can send a crafted string in the application URL to execute arbitrary code on the affected system. The NVD/Red Hat/UBUNTU OSV entries confirm the same vector and indicate...
CVE-2023-51886
CVE-2023-51886 is a confirmed buffer overflow vulnerability in the Mathtex package (versions 1.05 and earlier) affecting the main() function and the use of the \convertpath feature. Multiple connected sources (Red Hat, Ubuntu, OSV, Debian, UBUNTU OSV, Nessus plugin entry) describe that a remote a...
CVE-2023-51885
CVE-2023-51885 affects Mathtex v1.05 and earlier. The vulnerability is a buffer overflow in how the LaTeX string length is processed, enabling a remote attacker to execute arbitrary code. The provided connected documents confirm the existence and impact but do not include concrete remediation ste...
CVE-2023-51886
Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...
CVE-2023-51886
Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...
CVE-2023-51885
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
CVE-2023-51888
Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...
CVE-2023-51890
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
CVE-2023-51887
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
CVE-2023-51889
Stack Overflow vulnerability in the validate function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL...
CVE-2023-51890: Loop with Unreachable Exit Condition
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL...
CVE-2023-51888: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in the nomath function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL...
CVE-2023-51887: Improper Neutralization of Special Elements used in a Command
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL...
CVE-2023-51886: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in the main function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath...
CVE-2023-51885: Buffer Copy without Checking Size of Input
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component...
Buffer Overflow
mathtex is vulnerable to buffer overflow. The vulnerability is caused by improper bounds checking by the mathtex.cgi script. An attacker may inflict a buffer overflow and execute arbitrary code on the system or cause the application to crash...
Insecure Temporary File
mathtex is vulnerable to insecure temporary file. An attacker can gain access to the temporary files and use it for local attack vectors...
mathTeX mathtex.cgi getdirective Function dpi Tag Arbitrary Code Execution
The remote web server hosts mathTeX, a CGI script for displaying math on the web. The version of this application installed on the remote host fails to sanitize input via the 'dpi' or 'density' tags in an expression of shell metacharacters in the 'getdirective' function before using it in a call ...
