CVE-2009-1382

Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrary code via a TeX file with long (1) picture, (2) circle, or (3) input tags.

• CWE-119

• http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578Exploit, Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
• http://scary.beasts.org/security/CESA-2009-009.htmlExploit
• http://secunia.com/advisories/35752Vendor Advisory
• http://secunia.com/advisories/35816Vendor Advisory
• http://www.ocert.org/advisories/ocert-2009-010.html
• http://www.securityfocus.com/archive/1/504919/100/0/threaded
• http://www.vupen.com/english/advisories/2009/1875Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0877
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51794
• http://groups.google.com/group/comp.text.tex/browse_thread/thread/5d56d3d744351578Exploit, Patch
• http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039314.html
• http://scary.beasts.org/security/CESA-2009-009.htmlExploit
• http://secunia.com/advisories/35752Vendor Advisory
• http://secunia.com/advisories/35816Vendor Advisory
• http://www.ocert.org/advisories/ocert-2009-010.html
• http://www.securityfocus.com/archive/1/504919/100/0/threaded
• http://www.vupen.com/english/advisories/2009/1875Patch, Vendor Advisory
• http://www.vupen.com/english/advisories/2010/0877
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51794

Published

Jul 14, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1376Multiple integer overflows in the msn_slplink_process_msg fu…
• CVE-2009-1377The dtls1_buffer_record function in ssl/d1_pkt.c in OpenSSL …
• CVE-2009-1378Multiple memory leaks in the dtls1_process_out_of_seq_messag…
• CVE-2009-1379Use-after-free vulnerability in the dtls1_retrieve_buffered_…
• CVE-2009-1380Cross-site scripting (XSS) vulnerability in JMX-Console in J…
• CVE-2009-1381The map_yp_alias function in functions/imap_general.php in S…
• CVE-2009-1383The getdirective function in mathtex.cgi in mathTeX, when do…
• CVE-2009-1384pam_krb5 2.2.14 through 2.3.4, as used in Red Hat Enterprise…
• CVE-2009-1385Integer underflow in the e1000_clean_rx_irq function in driv…
• CVE-2009-1386ssl/s3_pkt.c in OpenSSL before 0.9.8i allows remote attacker…
• CVE-2009-1387The dtls1_retrieve_buffered_fragment function in ssl/d1_both…
• CVE-2009-1388The ptrace_start function in kernel/ptrace.c in the Linux ke…5.5