| Package | Affected versions | Patched versions |
|---|---|---|
| elinks | = 0.11.1 |
Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free