Published: 13/04/2007 Updated: 11/10/2017

CVSS v2 Base Score: 4.4 | Impact Score: 6.4 | Exploitability Score: 3.4

VMScore: 445

Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P

Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.

Vulnerable Product	Search on Vulmon	Subscribe to Product
elinks elinks 0.11.1

Arnaud Giersch discovered that elinks incorrectly attempted to load gettext catalogs from a relative path If a user were tricked into running elinks from a specific directory, a local attacker could execute code with user privileges ...

Debian Bug report logs - #380347 elinks: crashes on a specially crafted page Package: elinks; Maintainer for elinks is أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@userssourceforgenet>; Source for elinks is src:elinks (PTS, buildd, popcon) Reported by: Jakub Wilk <ubanus@userssfnet> Date: Sat, 29 Ju ...

Debian Bug report logs - #417789 elinks: elinks uses untrusted gettext catalog Package: elinks; Maintainer for elinks is أحمد المحمودي (Ahmed El-Mahmoudy) <aelmahmoudy@userssourceforgenet>; Source for elinks is src:elinks (PTS, buildd, popcon) Reported by: Arnaud Giersch <arnaudgiersch@iut-bmuniv-fcomtefr ...

source: wwwsecurityfocuscom/bid/23844/info ELinks is prone to an arbitrary code-execution vulnerability An attacker can exploit this issue to potentially execute arbitrary code with the privileges of the user running the affected application This issue requires an attacker to trick an unsuspecting victim into running the vulnerable ap ...

CWE-134 https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235411 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417789 http://www.ubuntu.com/usn/usn-457-1 http://www.securityfocus.com/bid/23844 http://secunia.com/advisories/25169 http://secunia.com/advisories/25198 http://www.trustix.org/errata/2007/0017/http://secunia.com/advisories/25255 http://security.gentoo.org/glsa/glsa-200706-03.xml http://secunia.com/advisories/25550 http://osvdb.org/35668 http://www.vupen.com/english/advisories/2007/1686 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9741 https://usn.ubuntu.com/457-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/29954/

CVE-2007-2027

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect