Total vulnerabilities in the database
Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.
| Software | From | Fixed in |
|---|---|---|
| gnu / groff | 1.16.1 | 1.16.1.x |
| gnu / groff | 1.11a | 1.11a.x |
| gnu / groff | 1.14 | 1.14.x |
| jgroff / jgroff | - | - |
| gnu / groff | 1.10 | 1.10.x |
| gnu / groff | 1.11 | 1.11.x |
| gnu / groff | 1.15 | 1.15.x |