4 results · Feed
-
High 8.6
less through 653 allows OS command execution via a newline character in the name of a file, because quoting is mishandl…
-
High 7.8
close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.
-
High 7.5
In GNU Less before 609, crafted data can result in "less -R" not filtering ANSI escape sequences sent to the terminal.
-
Unscored —
The is_utf8_well_formed function in GNU less before 475 allows remote attackers to have unspecified impact via malforme…