CVE-2004-1296

CVE-2004-1296 describes a local privilege escalation vulnerability in the eqn2graph and pic2graph scripts within GNU groff version 1.18.1. This flaw allows local attackers to overwrite arbitrary files through a symbolic link attack on temporary files. With a CVSS score of 2.1, this vulnerability has low severity, requiring local access with low attack complexity, and primarily impacts integrity by allowing unauthorized file modification. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in CISA's KEV catalog, though it has garnered some community discussion.