ctan records

8 published records for vendor ctan.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 5
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2023-51887No exploit	Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in applicctan · mathtex · CWE-77 pre-auth RCE Command injection	Critical9.8	—	2.5%	Jan 24, 2024
39Monitor	CVE-2023-51885No exploit	Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX stctan · mathtex · CWE-120 pre-auth RCE Memory safety	Critical9.8	—	1.3%	Jan 24, 2024
39Monitor	CVE-2023-51889No exploit	Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via ctan · mathtex · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	1.3%	Jan 24, 2024
39Monitor	CVE-2024-40446No exploit	An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted scriptctan · mimetex · CWE-94 pre-auth RCE	Critical9.8	—	0.8%	Apr 22, 2025
30Monitor	CVE-2023-51890No exploit	An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the apctan · mathtex · CWE-835 Pre-auth Denial of service	High7.5	—	0.9%	Jan 24, 2024
30Monitor	CVE-2023-51888No exploit	Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service victan · mathtex · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Jan 24, 2024
30Monitor	CVE-2023-51886No exploit	Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when uctan · mathtex · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Jan 24, 2024
29Monitor	CVE-2024-40445Proof of concept	A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary ctan · mimetex · CWE-77 pre-auth RCE Path traversal Command injection	High7.3	—	0.6%	Apr 22, 2025

CVE-2023-51887
40Plan
Command Injection vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via crafted string in applic
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
ctan · mathtexJan 24, 2024
CVE-2023-51885
39Monitor
Buffer Overflow vulnerability in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via the length of the LaTeX st
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
ctan · mathtexJan 24, 2024
CVE-2023-51889
39Monitor
Stack Overflow vulnerability in the validate() function in Mathtex v.1.05 and before allows a remote attacker to execute arbitrary code via
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
ctan · mathtexJan 24, 2024
CVE-2024-40446
39Monitor
An issue in forkosh Mime Tex before v.1.77 allows an attacker to execute arbitrary code via a crafted script
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
ctan · mimetexApr 22, 2025
CVE-2023-51890
30Monitor
An infinite loop issue discovered in Mathtex 1.05 and before allows a remote attackers to consume CPU resources via crafted string in the ap
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
ctan · mathtexJan 24, 2024
CVE-2023-51888
30Monitor
Buffer Overflow vulnerability in the nomath() function in Mathtex v.1.05 and before allows a remote attacker to cause a denial of service vi
HighCVSS 7.5No exploitEPSS 1%
ctan · mathtexJan 24, 2024
CVE-2023-51886
30Monitor
Buffer Overflow vulnerability in the main() function in Mathtex 1.05 and before allows a remote attacker to cause a denial of service when u
HighCVSS 7.5No exploitEPSS 1%
ctan · mathtexJan 24, 2024
CVE-2024-40445
29Monitor
A directory traversal vulnerability in forkosh Mime TeX before version 1.77 allows attackers on Windows systems to read or append arbitrary
HighCVSS 7.3Proof of conceptEPSS 1%
ctan · mimetexApr 22, 2025