CVE catalog

CVE-2009-2459

mimetex: CVE-2009-2459

[CVE catalog]

Severity
High
Published
Source
[NVD] · [CVE record]
EPSS
2.31% · Oct 25, 2026

Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianmimetexsid1.76-6fixed
Debianmimetexforky1.76-6fixed
Debianmimetexbookworm1.76-2fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianmimetexsourcesid1.50-1.1mediumNot reported[537254]
Debianmimetexsourceforky1.50-1.1mediumNot reported[537254]
Debianmimetexsourcebookworm1.50-1.1mediumNot reported[537254]

[Debian bug #537254]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [mimetex]Fixed
    Details (2)

    • 1.76-2 · amd64 · bookworm

      Fixed · Fixed: 1.50-1.1

      dsa · mimetex · debian · bookworm; dsa · mimetex · debian · 12

    • 1.76-2 · arm64 · bookworm

      Fixed · Fixed: 1.50-1.1

      dsa · mimetex · debian · bookworm; dsa · mimetex · debian · 12

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]