mimeTeX vulnerabilities

2009-10-08T00:00:00
ID USN-844-1
Type ubuntu
Reporter Ubuntu
Modified 2009-10-08T00:00:00

Description

Chris Evans discovered that mimeTeX incorrectly handled certain long tags.
An attacker could exploit this with a crafted mimeTeX expression and cause
a denial of service or possibly execute arbitrary code. (CVE-2009-1382)

Chris Evans discovered that mimeTeX contained certain directives that may
be unsuitable for handling untrusted user input. This update fixed the
issue by disabling the \input and \counter tags. (CVE-2009-2459)