[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

253164

 
 

909

 
 

197077

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

DSA-1917 mimetex -- several vulnerabilities

ID: oval:org.mitre.oval:def:8178Date: (C)2009-12-15   (M)2021-06-02
Class: PATCHFamily: unix




Several vulnerabilities have been discovered in mimetex, a lightweight alternative to MathML. The Common Vulnerabilities and Exposures project identifies the following problems: Chris Evans and Damien Miller, discovered multiple stack-based buffer overflow. An attacker could execute arbitrary code via a TeX file with long picture, circle, input tags. Chris Evans discovered that mimeTeX contained certain directives that may be unsuitable for handling untrusted user input. A remote attacker can obtain sensitive information.

Platform:
Debian 4.0
Product:
mimetex
Reference:
DSA-1917
CVE-2009-1382
CVE-2009-2459
CVE    2
CVE-2009-1382
CVE-2009-2459
CPE    1
cpe:/o:debian:debian_linux:4.0

© SecPod Technologies