Gnu Groff
11 CVEs affecting Gnu Groff. Latest disclosed: 2011-06-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2009-5078 | Medium | 6.5 | 2011-06-30 | contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to c… |
CVE-2009-5082 | | 2011-06-30 | The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failu… | |
CVE-2009-5081 | | 2011-06-30 | The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insuf… | |
CVE-2009-5080 | | 2011-06-30 | The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and… | |
CVE-2009-5079 | | 2011-06-30 | The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwri… | |
CVE-2009-5044 | | 2011-06-24 | contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporar… | |
CVE-2004-0969 | | 2005-02-09 | The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows… | |
CVE-2004-1296 | | 2004-12-31 | The (1) eqn2graph and (2) pic2graph scripts in groff 1.18.1 allow local users to overwrite arbitrary files via a symlink attack on temporary files. | |
CVE-2002-0003 | | 2002-02-27 | Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system. | |
CVE-2001-1022 | | 2001-07-26 | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and exec… | |
CVE-2000-0803 | | 2000-12-19 | GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a maliciou… |