EUVD-2007-2022

Malware in sbrugna...

CVE-2007-2027: Use of Externally-Controlled Format String

Untrusted search path vulnerability in the addfilenametostring function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog .po file in a "../po" directory, which can be leveraged to conduct format string attacks...