CVE-2001-1022

Format string vulnerability in pic utility in groff 1.16.1 and other versions, and jgroff before 1.15, allows remote attackers to bypass the -S option and execute arbitrary commands via format string specifiers in the plot command.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

11.44% chance of exploitation in the next 30 days, 96th percentile

Published

2002-06-25

Updated

2024-08-08

Proof-of-concept exploits (1)

• http://www.securityfocus.com/archive/1/199706

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/21037

References

• CVE Record
• NVD entry

Related

• CVE-2001-1021
• CVE-2001-1029
• CVE-2001-1015
• CVE-2001-1036
• CVE-2001-1013
• CVE-2001-1044