Vulnerability Details : CVE-2009-2461
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
Exploit prediction scoring system (EPSS) score for CVE-2009-2461
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 25 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2009-2461
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2009-2461
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-2461
- http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
- http://www.securityfocus.com/archive/1/504919/100/0/threaded
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/51797
- http://www.ocert.org/advisories/ocert-2009-010.html
-
http://www.vupen.com/english/advisories/2009/1875
Vendor Advisory
Products affected by CVE-2009-2461
- cpe:2.3:a:forkosh:mathtex:*:*:*:*:*:*:*:*
- cpe:2.3:a:forkosh:mathtex:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:forkosh:mathtex:1.00:*:*:*:*:*:*:*