Vulnerability Details : CVE-2009-2461
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
Products affected by CVE-2009-2461
- cpe:2.3:a:forkosh:mathtex:*:*:*:*:*:*:*:*
- cpe:2.3:a:forkosh:mathtex:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:forkosh:mathtex:1.00:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2009-2461
0.06%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 25 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2009-2461
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.2
|
HIGH | AV:L/AC:L/Au:N/C:C/I:C/A:C |
3.9
|
10.0
|
NIST |
CWE ids for CVE-2009-2461
-
Assigned by: nvd@nist.gov (Primary)
References for CVE-2009-2461
-
http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
Who is this guy...?
-
http://www.securityfocus.com/archive/1/504919/100/0/threaded
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/51797
mathTeX mathtex.cgi unspecified CVE-2009-2461 Vulnerability Report
-
http://www.ocert.org/advisories/ocert-2009-010.html
oCERT archive
-
http://www.vupen.com/english/advisories/2009/1875
Site en constructionVendor Advisory
Jump to