Computer Security
[EN] securityvulns.ru no-pyccku


id3lib symbolic links security vulnerability
Published:11.09.2007
Source:
SecurityVulns ID:8133
Type:local
Threat Level:
5/10
CVE:CVE-2007-4460 (The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.)
Original documentdocumentDEBIAN, [SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service (11.09.2007)

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod