CVE-2007-2027

Untrusted search path vulnerability in the add_filename_to_string function in intl/gettext/loadmsgcat.c for Elinks 0.11.1 allows local users to cause Elinks to use an untrusted gettext message catalog (.po file) in a "../po" directory, which can be leveraged to conduct format string attacks.

• CWE-134

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417789
• http://osvdb.org/35668
• http://secunia.com/advisories/25169Vendor Advisory
• http://secunia.com/advisories/25198Vendor Advisory
• http://secunia.com/advisories/25255Vendor Advisory
• http://secunia.com/advisories/25550Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200706-03.xml
• http://www.securityfocus.com/bid/23844
• http://www.trustix.org/errata/2007/0017/
• http://www.ubuntu.com/usn/usn-457-1
• http://www.vupen.com/english/advisories/2007/1686Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235411Exploit, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9741
• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=417789
• http://osvdb.org/35668
• http://secunia.com/advisories/25169Vendor Advisory
• http://secunia.com/advisories/25198Vendor Advisory
• http://secunia.com/advisories/25255Vendor Advisory
• http://secunia.com/advisories/25550Vendor Advisory
• http://security.gentoo.org/glsa/glsa-200706-03.xml
• http://www.securityfocus.com/bid/23844
• http://www.trustix.org/errata/2007/0017/
• http://www.ubuntu.com/usn/usn-457-1
• http://www.vupen.com/english/advisories/2007/1686Vendor Advisory
• https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=235411Exploit, Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9741

Published

Apr 13, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2021Multiple PHP remote file inclusion vulnerabilities in Pineap…
• CVE-2007-2022Adobe Macromedia Flash Player 7 and 9, when used with Opera …
• CVE-2007-2023USB20.dll in Secustick USB flash drive decouples the authori…
• CVE-2007-2024Unrestricted file upload vulnerability in the UpLoad feature…
• CVE-2007-2025Unrestricted file upload vulnerability in the UpLoad feature…
• CVE-2007-2026The gnu regular expression code in file 4.20 allows context-…
• CVE-2007-2028Memory leak in freeRADIUS 1.1.5 and earlier allows remote at…
• CVE-2007-2029File descriptor leak in the PDF handler in Clam AntiVirus (C…
• CVE-2007-2030lharc.c in lha does not securely create temporary files, whi…
• CVE-2007-2031Buffer overflow in the HTTP proxy service for 3proxy 0.5 to …
• CVE-2007-2032Cisco Wireless Control System (WCS) before 4.0.96.0 has a ha…
• CVE-2007-2033Unspecified vulnerability in Cisco Wireless Control System (…