Groff (Gnu) - vulnerabilities (CVEs)
10 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2011-06-30. Vendor: Gnu.
CVEs of Groff
- CVE-2009-5078 - CVSS 6.5 (medium), 2011-06-30: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to…
- CVE-2009-5081 - CVSS 3.3 (low), 2011-06-30: The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an…
- CVE-2009-5080 - CVSS 3.3 (low), 2011-06-30: The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and…
- CVE-2009-5079 - CVSS 3.3 (low), 2011-06-30: The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to…
- CVE-2009-5082 - CVSS 3.3 (low), 2011-06-30: The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a…
- CVE-2009-5044 - CVSS 3.3 (low), 2011-06-24: contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp…
- CVE-2004-0969 - CVSS 2.1 (low), 2005-02-09: The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows…
- CVE-2002-0003 - CVSS 7.5 (high), 2002-02-27: Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system.
- CVE-2001-1022 - CVSS 7.5 (high), 2001-07-26: Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and…
- CVE-2000-0803 - CVSS 10 (critical), 2000-12-19: GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a…
