CVE-2009-2461
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files...
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
Exploit likelihood
What each source reports
NVD Score used
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- Updated
- 2026-11-02
EUVDEUVD-2009-2456 No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
EUVD-2009-2456- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r968-27hg-qg35 No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files...
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
GHSA-r968-27hg-qg35- Updated
- 2026-11-02
OSV No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2461 No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
DEBIAN-CVE-2009-2461- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mathtexDebian:12 |
before 1.03-1 | 1.03-1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2009-2461 is a high vulnerability (CVSS 7.2) in Forkosh Mathtex, published July 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in mathtex 1.03-1.
References
vupen.com/english/advisories/2009/1875
securityfocus.com/archive/1/504919/100/0/threaded
secunia.com/advisories/35816
ocert.org/advisories/ocert-2009-010.html
groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
exchange.xforce.ibmcloud.com/vulnerabilities/51797
nvd.nist.gov/vuln/detail/CVE-2009-2461
github.com/advisories/GHSA-r968-27hg-qg35
security-tracker.debian.org/tracker/CVE-2009-2461