PT-2008-3234 · Gnu+1 · Gnu M4+1
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
GNU m4 versions prior to 1.4.11
Description
The issue is related to improper handling of filenames specified with the -F option, which might allow context-dependent attackers to execute arbitrary code. It is not clear when this issue crosses privilege boundaries.
Recommendations
For versions prior to 1.4.11, update to version 1.4.11 or later to resolve the issue.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Debian
Gnu M4