CVE-2009-1382
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 9.0%
exploitation probability
9.0%top 5% of all CVEs
observed exploitation
nono source reports it
Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags.
Affected products
n/a · n/aReferences
http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.htmlhttp://scary.beasts.org/security/CESA-2009-009.htmlhttp://secunia.com/advisories/35752http://secunia.com/advisories/35816https://exchange.xforce.ibmcloud.com/vulnerabilities/51794http://www.ocert.org/advisories/ocert-2009-010.htmlhttp://www.securityfocus.com/archive/1/504919/100/0/threadedhttp://www.vupen.com/english/advisories/2009/1875http://www.vupen.com/english/advisories/2010/0877