CVE-2009-2461

HIGH 7.2CVE-2009-2461 · Published 14/07/2009 · updated 16/06/2026

In short

CVE-2009-2461 is a HIGH (CVSS 7.2) vulnerability affecting mathtex (forkosh).
Chance of exploitation in the next 30 days (EPSS): 0.36%, higher than 30.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mathtex forkosh	`= 1.00= 1.01≤ 1.02`	No fix yet

Description

mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.

References

groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
secunia.com/advisories/35816 · Vendor Advisory
ocert.org/advisories/ocert-2009-010.html
securityfocus.com/archive/1/504919/100/0/threaded
vupen.com/english/advisories/2009/1875 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/51797

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free