7.2

CVE-2009-2461

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Forkosh ≫ Mathtex Version <= 1.02
Forkosh ≫ Mathtex Version1.00
Forkosh ≫ Mathtex Version1.01
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.36% 0.281
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
http://secunia.com/advisories/35816
Vendor Advisory
http://www.ocert.org/advisories/ocert-2009-010.html
http://www.securityfocus.com/archive/1/504919/100/0/threaded
http://www.vupen.com/english/advisories/2009/1875
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/51797