CVE-2024-29073

CVSS V2 None CVSS V3 None

Description

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. An attacker can share a flashcard to trigger this vulnerability.

Overview

CVE ID
CVE-2024-29073

Assigner
talos

Vulnerability Status
PUBLISHED

Published Version
2024-07-22T14:20:27.250Z

Last Modified Date
2024-07-22T17:00:08.247Z

Weakness Enumerations

CWE	URL
CWE-829	http://cwe.mitre.org/data/definitions/829.html

References

Reference URL	Reference Tags
https://talosintelligence.com/vulnerability_reports/TALOS-2024-1992

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2024-29073
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-29073

History

Created	Old Value	New Value	Data Type	Notes
2024-07-23 13:11:14				Added to TrackCVE