CVE-2009-5078

Severity

64%

Complexity

99%

Confidentiality

81%

contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.

CVSS 3.0 Base Score 6.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

CVSS 2.0 Base Score 6.4. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:N/C:N/I:P/A:P).

Overview

First reported 13 years ago

2011-06-30 15:55:00

Last updated 8 years ago

2016-03-30 21:36:00

Affected Software

GNU Groff 1.10

1.10

GNU Groff 1.11

1.11

GNU Groff 1.11a

1.11a

GNU Groff 1.14

1.14

GNU Groff 1.15

1.15

GNU Groff 1.16

1.16

GNU Groff 1.16.1

1.16.1

GNU Groff 1.18.1

1.18.1

GNU Groff 1.19

1.19

GNU Groff

Apple Mac OS X

References

ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz

Patch

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338

APPLE-SA-2015-08-13-2

Vendor Advisory

[oss-security] 20090809 CVE id request: groff (pdfroff)

[oss-security] 20090810 Re: CVE id request: groff (pdfroff)

36381

https://support.apple.com/kb/HT205031