The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search vulnerabilities
CVE-2009-1383
CVSS 2.0 · 7.5 High
EPSS 2.2%
KEV · Not listed
Vendors
Products
CVE-2009-2460
Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors.
CVSS 2.0 · 10.0 Critical
EPSS 2.7%
KEV · Not listed
Vendors
Products
CVE-2009-2461
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
CVSS 2.0 · 7.2 High
EPSS < 1%
KEV · Not listed
Vendors
Products
Page 1 of 1.