Vulnerabilities (CVE)

Filtered by vendor Gnu Subscribe
Filtered by product M4
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2008-1688 1 Gnu 1 M4 2023-12-10 7.5 HIGH N/A
Unspecified vulnerability in GNU m4 before 1.4.11 might allow context-dependent attackers to execute arbitrary code, related to improper handling of filenames specified with the -F option. NOTE: it is not clear when this issue crosses privilege boundaries.
CVE-2008-1687 1 Gnu 1 M4 2023-12-10 7.5 HIGH N/A
The (1) maketemp and (2) mkstemp builtin functions in GNU m4 before 1.4.11 do not quote their output when a file is created, which might allow context-dependent attackers to trigger a macro expansion, leading to unspecified use of an incorrect filename.