forkosh Mime TeX Code Injection Vulnerability

A code injection vulnerability has been identified in forkosh Mime TeX versions prior to 1.77. This issue allows an attacker to execute arbitrary code by sending a crafted script that is parsed by the Mime TeX engine. The vulnerability is present in both command-line and CGI modes.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the server where Mime TeX is running.

Remediation

Users are advised to stop using Mime TeX, as it is unmaintained and vulnerable. If it cannot be immediately discontinued, restrict user input and isolate the service using sandboxing or containerization.