CVE-2009-2461
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files...
CVE-2009-2461 is a high vulnerability (CVSS 7.2) in Forkosh Mathtex, published July 14, 2009. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.36%, the 30th percentile. Fixed in mathtex 1.03-1.
- Severity
- 7.2 HighCVSS 2.0, NVD
- Exploit chance
- 0.36%EPSS, 30th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.03-1mathtex
Description
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
Exploit likelihood
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mathtexDebian:12 | before 1.03-1 | 1.03-1 |
What each source reports
NVD Score used
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- CVSS 2.0
- 7.2 High
AV:L/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE ListNo score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- Updated
- 2026-11-02
EUVDEUVD-2009-2456No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
EUVD-2009-2456- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r968-27hg-qg35No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files...
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
GHSA-r968-27hg-qg35- Updated
- 2026-11-02
OSVNo score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
CVE-2009-2461- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-2461No score
mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.
- Record
DEBIAN-CVE-2009-2461- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2009/1875
securityfocus.com/archive/1/504919/100/0/threaded
secunia.com/advisories/35816
ocert.org/advisories/ocert-2009-010.html
groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578
exchange.xforce.ibmcloud.com/vulnerabilities/51797
nvd.nist.gov/vuln/detail/CVE-2009-2461
github.com/advisories/GHSA-r968-27hg-qg35
security-tracker.debian.org/tracker/CVE-2009-2461