{"schema_version":"1.7.5","id":"CVE-2009-2944","published":"2009-08-31T20:30:00Z","modified":"2026-04-10T03:40:53.634115Z","related":["openSUSE-SU-2024:10860-1"],"details":"Incomplete blacklist vulnerability in the teximg plugin in ikiwiki before 3.1415926 and 2.x before 2.53.4 allows context-dependent attackers to read arbitrary files via crafted TeX commands.","references":[{"type":"ADVISORY","url":"http://ikiwiki.info/security/#index35h2"},{"type":"ADVISORY","url":"http://secunia.com/advisories/36516"},{"type":"ADVISORY","url":"http://secunia.com/advisories/36539"},{"type":"ADVISORY","url":"http://www.debian.org/security/2009/dsa-1875"},{"type":"ADVISORY","url":"http://www.vupen.com/english/advisories/2009/2475"},{"type":"FIX","url":"http://www.securityfocus.com/bid/36181"},{"type":"FIX","url":"http://www.vupen.com/english/advisories/2009/2475"},{"type":"WEB","url":"http://osvdb.org/57575"},{"type":"WEB","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/52922"}]}