Description
Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) \environ, (2) \input, and (3) \counter TeX directives.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | mimetex | 1.50-1.1 | — |
| Debian 12 | mimetex | 1.50-1.1 | — |
| Debian 5.0 | mimetex | 1.50-1+lenny1 | DSA-1917-1 |
| Debian 4.0 | mimetex | 1.50-1+etch1 | DSA-1917-1 |
Advisories 1
- DSA-1917-1 mimetex - several vulnerabilities Debian Security (DSA / DLA) · Mar 9, 2026
References
- ADV-2009-1875 vdb-entry
- 35752 third-party-advisory
- ADV-2010-0877 vdb-entry
- http://scary.beasts.org/security/CESA-2009-009.html
- FEDORA-2010-6546 vendor-advisory