CVE-2009-2461 - mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors

Back Back to CVE browser

HIGH

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors

Published Jul 14, 2009

7.2

HIGH

CVSS 2.0

EPSS 0.36%

Description

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (6)

http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
x_refsource_MISC
http://secunia.com/advisories/35816
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ocert.org/advisories/ocert-2009-010.html
x_refsource_MISC
http://www.securityfocus.com/archive/1/504919/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2009/1875
vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51797
vdb-entryx_refsource_XF

Link	Providers	Tags
http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578		x_refsource_MISC
http://secunia.com/advisories/35816		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.ocert.org/advisories/ocert-2009-010.html		x_refsource_MISC
http://www.securityfocus.com/archive/1/504919/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.vupen.com/english/advisories/2009/1875		vdb-entryx_refsource_VUPENVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51797		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 14, 2009

Updated Aug 7, 2024

Reserved Jul 14, 2009

Link CVE-2009-2461

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2461

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2461