GNU groff contains a flaw that is triggered when a user opens a man page containing macros. These macros will be run under the UID of the user opening the page. This may allow an attacker to compromise a user's account (or the system if root is targeted) by executing arbitrary commands.
Classification
Location:
Context Dependent
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Solution:
Solution Unknown
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
Solution
OSVDB is not aware of a solution for this vulnerability.
