CVE

Id
25384  
CVE No.
CVE-2007-2027  
Status
Candidate  
Description
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.  
Phase
Assigned (20070413)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
253188 25384 CVE-2007-2027 CONFIRM:https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235411  View
253189 25384 CVE-2007-2027 CONFIRM:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417789  View
253190 25384 CVE-2007-2027 GENTOO:GLSA-200706-03  View
253191 25384 CVE-2007-2027 URL:http://security.gentoo.org/glsa/glsa-200706-03.xml  View
253192 25384 CVE-2007-2027 TRUSTIX:2007-0017  View
253193 25384 CVE-2007-2027 URL:http://www.trustix.org/errata/2007/0017/  View
253194 25384 CVE-2007-2027 UBUNTU:USN-457-1  View
253195 25384 CVE-2007-2027 URL:http://www.ubuntu.com/usn/usn-457-1  View
253196 25384 CVE-2007-2027 BID:23844  View
253197 25384 CVE-2007-2027 URL:http://www.securityfocus.com/bid/23844  View
253198 25384 CVE-2007-2027 OVAL:oval:org.mitre.oval:def:9741  View
253199 25384 CVE-2007-2027 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:9741  View
253200 25384 CVE-2007-2027 VUPEN:ADV-2007-1686  View
253201 25384 CVE-2007-2027 URL:http://www.vupen.com/english/advisories/2007/1686  View
253202 25384 CVE-2007-2027 OSVDB:35668  View
253203 25384 CVE-2007-2027 URL:http://osvdb.org/35668  View
253204 25384 CVE-2007-2027 SECUNIA:25169  View
253205 25384 CVE-2007-2027 URL:http://secunia.com/advisories/25169  View
253206 25384 CVE-2007-2027 SECUNIA:25198  View
253207 25384 CVE-2007-2027 URL:http://secunia.com/advisories/25198  View
253208 25384 CVE-2007-2027 SECUNIA:25255  View
253209 25384 CVE-2007-2027 URL:http://secunia.com/advisories/25255  View
253210 25384 CVE-2007-2027 SECUNIA:25550  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53125 JVNDB-2007-001817 ClamAV におけるサービス運用妨害の脆弱性 ClamAV には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2007-2029 25384 7.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001817.html  View