CVE-2009-5078
Published Jun 30, 2011
Last updated 9 years ago
Overview
- Description
- contrib/pdfmark/pdfroff.sh in GNU troff (aka groff) before 1.21 launches the Ghostscript program without the -dSAFER option, which allows remote attackers to create, overwrite, rename, or delete arbitrary files via a crafted document.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 6.5
- Impact score
- 2.5
- Exploitability score
- 3.9
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Severity
- MEDIUM
CVSS 2.0
- Type
- Primary
- Base score
- 6.4
- Impact score
- 4.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-254
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:gnu:groff:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7FF8D628-0287-470B-B8CA-18C7BF453B4D",
"versionEndIncluding": "1.20.1"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.10:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35017C15-4CCD-4B44-9108-F5650319A009"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.11:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B8AC4613-F1BE-4EEE-84C3-A13D2AC048B8"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.11a:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D6BD17C-0DE9-405D-BC02-E996FBC4F97A"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.14:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5493392A-B8E1-4F71-A1ED-6889FD1CC217"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.15:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BDF86410-1841-4549-A0FE-3D16C6CCE383"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C91EE2C2-DE96-494D-BEEE-D07ED74EDEAC"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.16.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EDB1389A-0F7D-4616-8553-AF1E40B05256"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.17.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D4A1AC6-2820-4992-B652-EF6FD308D643"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.17.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "59A32AD0-B019-4FAF-BC8A-01FE6F90628E"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.18.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A81CEA14-F694-431F-BAC9-BBB8CC09BBCB"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C3A17D1-F3A9-45FC-A943-C47B8121599C"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0D64601D-0EA0-40AD-9E25-74360051CC2C"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.19.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D944298-B544-4D38-96A3-5CA22C9C3C7B"
},
{
"criteria": "cpe:2.3:a:gnu:groff:1.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F737E42-B8F1-4C9C-B3E9-382BCE43859D"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7883E465-932D-4C11-AA54-97E44181F906",
"versionEndIncluding": "10.10.4"
}
],
"operator": "OR"
}
]
}
]