id3lib symbolic links security vulnerability
Published:		11.09.2007
Source:		BUGTRAQ
SecurityVulns ID:		8133
Type:		local
Level:		5/10

CVE:

CVE-2007-4460 (The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.)

Original document

DEBIAN, [SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service (11.09.2007)

Discuss:

Read or add your comments to this news (0 comments)