CVE-2009-5078 in groff
Summary
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
06/30/2011
Disclosure
06/30/2011
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 57803 | GNU groff 7pk security | 254 | Not defined | Official fix | CVE-2009-5078 |