NetSight
IP …
high7.5Public exploit code

CVE-2001-1022

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and exec…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.

Affected products

VendorProductAffected versions
GnuGroff
Versions 1.10, 1.11, 1.11a, 1.14, 1.15, 1.16.1
JgroffJgroff
All versions

References