CVE-2007-2027

Publication date 13 April 2007

Last updated 24 July 2024

Ubuntu priority

Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a ”../po” directory, which can be leveraged to conduct format string attacks.

Status

Show unmaintained releases

No maintained releases are affected by this CVE.

Package	Ubuntu Release	Status
elinks	7.04 feisty	Fixed 0.11.1-1.2ubuntu2.1
	6.10 edgy	Fixed 0.11.1-1ubuntu2.1
	6.06 LTS dapper	Fixed 0.10.6-1ubuntu3.1

How can I get the fixes?
What do statuses mean?

References

MITRE
NVD
Launchpad
Debian

Related Ubuntu Security Notices (USN)

USN-457-1
elinks vulnerability
7 May 2007

Other references

https://www.cve.org/CVERecord?id=CVE-2007-2027