Lucene search
Veracode Vulnerability DatabaseVERACODE:28239HistoryDec 06, 2020 - 3:34 a.m.
Remote Code Execution (RCE)
2020-12-0603:34:31
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
remote code execution
vulnerable software
arbitrary commands
shell metacharacters
EPSS
0.012
Percentile
85.1%
mathTeX is vulnerable to remote code execution. The vulnerability allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
References
groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
secunia.com/advisories/35816
www.ocert.org/advisories/ocert-2009-010.html
www.securityfocus.com/archive/1/504919/100/0/threaded
www.vupen.com/english/advisories/2009/1875
exchange.xforce.ibmcloud.com/vulnerabilities/51795
security-tracker.debian.org/tracker/CVE-2009-1383
Related
prion
prion
Code injection
2009-07-14 20:30:00
cvelist
cvelist
CVE-2009-1383
2009-07-14 20:16:00
nessus
nessus
mathTeX mathtex.cgi getdirective Function dpi Tag Arbitrary Code Execution
2010-10-06 00:00:00
ubuntucve
ubuntucve
CVE-2009-1383
2009-07-14 00:00:00
nvd
nvd
CVE-2009-1383
2009-07-14 20:30:00
cve
cve
CVE-2009-1383
2009-07-14 20:30:00
debiancve
debiancve
CVE-2009-1383
2009-07-14 20:30:00
securityvulns
securityvulns