GR
Product
Groff
10
CVEs
0
On KEV
6.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Groff to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-5078 | 6.5 | Jun 30 | contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite,… Affected: through 1.20.1; 1.10; 1.11; 1.11a; 1.14; 1.15; +9 more |
| CVE-2009-5082 | – | Jun 30 | The (1) configure and (2) config.guess scripts in GNU troff (aka groff) 1.20.1 on Openwall GNU/*/Linux (aka Owl) improperly create temporary files upon a failure of the mktemp… Affected: 1.20.1 |
| CVE-2009-5081 | – | Jun 30 | The (1) config.guess, (2) contrib/groffer/perl/groffer.pl, and (3) contrib/groffer/perl/roff2.pl scripts in GNU troff (aka groff) 1.21 and earlier use an insufficient number of X… Affected: through 1.21; 1.10; 1.11; 1.11a; 1.14; 1.15; +10 more |
| CVE-2009-5080 | – | Jun 30 | The (1) contrib/eqn2graph/eqn2graph.sh, (2) contrib/grap2graph/grap2graph.sh, and (3) contrib/pic2graph/pic2graph.sh scripts in GNU troff (aka groff) 1.21 and earlier do not… Affected: through 1.21; 1.10; 1.11; 1.11a; 1.14; 1.15; +10 more |
| CVE-2009-5079 | – | Jun 30 | The (1) gendef.sh, (2) doc/fixinfo.sh, and (3) contrib/gdiffmk/tests/runtests.in scripts in GNU troff (aka groff) 1.21 and earlier allow local users to overwrite arbitrary files… Affected: through 1.21; 1.10; 1.11; 1.11a; 1.14; 1.15; +10 more |
| CVE-2009-5044 | – | Jun 24 | contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 allows local users to overwrite arbitrary files via a symlink attack on a pdf#####.tmp temporary file Affected: through 1.20.1; 1.10; 1.11; 1.11a; 1.14; 1.15; +9 more |
| CVE-2004-0969 | – | Feb 9 | The groffer script in the Groff package 1.18 and later versions, as used in Trustix Secure Linux 1.5 through 2.1, and possibly other operating systems, allows local users to… Affected: 1.19 |
| CVE-2002-0003 | – | Feb 27 | Buffer overflow in the preprocessor in groff 1.16 and earlier allows remote attackers to gain privileges via lpd in the LPRng printing system Affected: through 1.16 |
| CVE-2001-1022 | – | Jul 26 | Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary… Affected: 1.10; 1.11; 1.11a; 1.14; 1.15; 1.16.1 |
| CVE-2000-0803 | – | Dec 19 | GNU Groff uses the current working directory to find a device description file, which allows a local user to gain additional privileges by including a malicious postpro directive… Affected: before 1.17 |
Showing 10