CVE-2009-1383
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows...
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
Exploit likelihood
What each source reports
NVD Score used
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
CVE-2009-1383- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
CVE-2009-1383- Updated
- 2026-11-02
EUVDEUVD-2009-1381 No score
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
EUVD-2009-1381- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-578c-38fg-wf3m No score
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows...
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
GHSA-578c-38fg-wf3m- Weakness
- CWE-94
- Updated
- 2026-11-02
OSV No score
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
CVE-2009-1383- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-1383 No score
The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.
- Record
DEBIAN-CVE-2009-1383- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mathtexDebian:12 |
before 1.03-1 | 1.03-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-1383 is a high vulnerability (CVSS 7.5) in Forkosh Mathtex, published July 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.16%, the 82nd percentile. Fixed in mathtex 1.03-1.
References
vupen.com/english/advisories/2009/1875
securityfocus.com/archive/1/504919/100/0/threaded
secunia.com/advisories/35816
exchange.xforce.ibmcloud.com/vulnerabilities/51795
ocert.org/advisories/ocert-2009-010.html
groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
nvd.nist.gov/vuln/detail/CVE-2009-1383
github.com/advisories/GHSA-578c-38fg-wf3m
security-tracker.debian.org/tracker/CVE-2009-1383