Ctan Mathtex vulnerabilities

CVE-2023-51887 [CRITICAL] CWE-77 CVE-2023-51887: Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arb Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in application URL.

CVE-2023-51889 [CRITICAL] CWE-787 CVE-2023-51889: Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in the application URL.

CVE-2023-51885 [CRITICAL] CWE-120 CVE-2023-51885: Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbit Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX string component.

CVE-2009-1383 [HIGH] CVE-2009-1383: The getdirective function in mathtex The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands via shell metacharacters in the dpi tag.

CVE-2009-2460 [CRITICAL] CVE-2009-2460: Multiple stack-based buffer overflows in mathtex Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack vectors.

CVE-2023-51890 [HIGH] CWE-835 CVE-2023-51890: An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CP An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the application URL.

CVE-2023-51886 [HIGH] CWE-120 CVE-2023-51886: Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote atta Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when using \convertpath.

CVE-2023-51888 [HIGH] CWE-120 CVE-2023-51888: Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service via a crafted string in the application URL.

CVE-2009-2461 [HIGH] CVE-2009-2461: mathtex mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local attack vectors.