Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

gnu groff 1.15 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2001-1022
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff prior to 1.15, allows remote malicious users to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
Gnu Groff 1.14Gnu Groff 1.15Gnu Groff 1.16.1Jgroff JgroffGnu Groff 1.11Gnu Groff 1.11aGnu Groff 1.10
NA
CVE-2009-5079
The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and previous versions allow local users to overwrite arbitrary files via a symlink attack on a gro#####.tmp or /tmp/##### temporary file.
Gnu GroffGnu Groff 1.16.1Gnu Groff 1.16Gnu Groff 1.19.2Gnu Groff 1.18.1Gnu Groff 1.11aGnu Groff 1.19.1Gnu Groff 1.20Gnu Groff 1.19Gnu Groff 1.20.1Gnu Groff 1.14Gnu Groff 1.17.2Gnu Groff 1.10Gnu Groff 1.17.1Gnu Groff 1.11Gnu Groff 1.15
NA
CVE-2009-5080
The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and previous versions do not properly handle certain failed attempts to create temporary directories, which might allow local...
Gnu GroffGnu Groff 1.16.1Gnu Groff 1.16Gnu Groff 1.19.2Gnu Groff 1.18.1Gnu Groff 1.11aGnu Groff 1.19.1Gnu Groff 1.20Gnu Groff 1.19Gnu Groff 1.20.1Gnu Groff 1.14Gnu Groff 1.17.2Gnu Groff 1.10Gnu Groff 1.17.1Gnu Groff 1.11Gnu Groff 1.15
NA
CVE-2009-5081
The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and previous versions use an insufficient number of X characters in the template argument to the tempfile function, which makes it easier for loc...
Gnu GroffGnu Groff 1.16.1Gnu Groff 1.16Gnu Groff 1.19.2Gnu Groff 1.18.1Gnu Groff 1.11aGnu Groff 1.19.1Gnu Groff 1.20Gnu Groff 1.19Gnu Groff 1.20.1Gnu Groff 1.14Gnu Groff 1.17.2Gnu Groff 1.10Gnu Groff 1.17.1Gnu Groff 1.11Gnu Groff 1.15
NA
CVE-2009-5044
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) prior to 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file.
Apple Mac Os XGnu Groff 1.16.1Gnu Groff 1.16Gnu Groff 1.19.2Gnu Groff 1.18.1Gnu Groff 1.11aGnu GroffGnu Groff 1.19.1Gnu Groff 1.20Gnu Groff 1.19Gnu Groff 1.14Gnu Groff 1.17.2Gnu Groff 1.10Gnu Groff 1.17.1Gnu Groff 1.11Gnu Groff 1.15
6.5
CVSSv3
CVE-2009-5078
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) prior to 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote malicious users to create, overwrite, rename, or delete arbitrary files via a crafted document.
Gnu Groff 1.19Gnu Groff 1.18.1Gnu GroffGnu Groff 1.16.1Gnu Groff 1.17.1Gnu Groff 1.11aGnu Groff 1.15Gnu Groff 1.20Gnu Groff 1.19.1Gnu Groff 1.19.2Gnu Groff 1.10Gnu Groff 1.16Gnu Groff 1.17.2Gnu Groff 1.11Gnu Groff 1.14Apple Mac Os X
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook