Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives.

Fixes for CVE-2009-1382 CVE-2009-2459 for EL-5, update to latest upstream for all releases.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

- Thu Oct 1 2009 Jorge Torres <jtorresh at gmail.com> -     1.71-1

    - Update to 1.71

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been discovered in mimetex, a lightweight alternative to MathML. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-1382     Chris Evans and Damien Miller, discovered multiple     stack-based buffer overflow. An attacker could execute     arbitrary code via a TeX file with long picture, circle,     input tags.

  - CVE-2009-2459     Chris Evans discovered that mimeTeX contained certain     directives that may be unsuitable for handling untrusted     user input. A remote attacker can obtain sensitive     information.

- Fixes a buffer-overflow as detailed in #511049. -     Updates to 1.7.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Chris Evans discovered that mimeTeX incorrectly handled certain long tags. An attacker could exploit this with a crafted mimeTeX expression and cause a denial of service or possibly execute arbitrary code.
(CVE-2009-1382)

Chris Evans discovered that mimeTeX contained certain directives that may be unsuitable for handling untrusted user input. This update fixed the issue by disabling the \input and \counter tags. (CVE-2009-2459).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
65663	Fedora 18 : mimetex-1.74-1.fc18 (2013-3910)	Nessus	Fedora Local Security Checks	critical
65662	Fedora 17 : mimetex-1.74-1.fc17 (2013-3902)	Nessus	Fedora Local Security Checks	critical
47439	Fedora 12 : mimetex-1.71-1.fc12 (2010-6546)	Nessus	Fedora Local Security Checks	critical
44782	Debian DSA-1917-1 : mimetex - several vulnerabilities	Nessus	Debian Local Security Checks	critical
42375	Fedora 10 : mimetex-1.71-1.fc10 (2009-10225)	Nessus	Fedora Local Security Checks	critical
42374	Fedora 11 : mimetex-1.71-1.fc11 (2009-10170)	Nessus	Fedora Local Security Checks	critical
42079	Ubuntu 8.04 LTS / 8.10 / 9.04 : mimetex vulnerabilities (USN-844-1)	Nessus	Ubuntu Local Security Checks	critical

Detections

Analytics

CVE-2009-2459

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical