CVE-2009-5078
Severity Score
6.5
*CVSS v3
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.
contrib/pdfmark/pdfroff.sh en GNU troff (también conocido como groff) antes de v1.21 lanza el programa Ghostscript sin la opcion -dSAFER, lo que permite a usuarios remotos crear, sobrescribir, renombrar o eliminar archivos de su elección a través de un documento manipulado.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2011-06-30 CVE Reserved
- 2011-06-30 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-254: 7PK - Security Features
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=538338 | X_refsource_confirm | |
| http://openwall.com/lists/oss-security/2009/08/09/1 | Mailing List | |
| http://openwall.com/lists/oss-security/2009/08/10/2 | Mailing List | |
| http://www.securityfocus.com/bid/36381 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| ftp://ftp.gnu.org/gnu/groff/groff-1.20.1-1.21.diff.gz | 2016-03-30 |
| URL | Date | SRC |
|---|---|---|
| http://lists.apple.com/archives/security-announce/2015/Aug/msg00001.html | 2016-03-30 | |
| https://support.apple.com/kb/HT205031 | 2016-03-30 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | <= 1.20.1 Search vendor "Gnu" for product "Groff" and version " <= 1.20.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.10 Search vendor "Gnu" for product "Groff" and version "1.10" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.11 Search vendor "Gnu" for product "Groff" and version "1.11" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.11a Search vendor "Gnu" for product "Groff" and version "1.11a" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.14 Search vendor "Gnu" for product "Groff" and version "1.14" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.15 Search vendor "Gnu" for product "Groff" and version "1.15" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.16 Search vendor "Gnu" for product "Groff" and version "1.16" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.16.1 Search vendor "Gnu" for product "Groff" and version "1.16.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.17.1 Search vendor "Gnu" for product "Groff" and version "1.17.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.17.2 Search vendor "Gnu" for product "Groff" and version "1.17.2" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.18.1 Search vendor "Gnu" for product "Groff" and version "1.18.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.19 Search vendor "Gnu" for product "Groff" and version "1.19" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.19.1 Search vendor "Gnu" for product "Groff" and version "1.19.1" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.19.2 Search vendor "Gnu" for product "Groff" and version "1.19.2" | - |
Affected
| ||||||
| Gnu Search vendor "Gnu" | Groff Search vendor "Gnu" for product "Groff" | 1.20 Search vendor "Gnu" for product "Groff" and version "1.20" | - |
Affected
| ||||||
| Apple Search vendor "Apple" | Mac Os X Search vendor "Apple" for product "Mac Os X" | <= 10.10.4 Search vendor "Apple" for product "Mac Os X" and version " <= 10.10.4" | - |
Affected
| ||||||