The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-08-21T21:00:00
Updated: 2024-08-07T14:53:56.052Z
Reserved: 2007-08-21T00:00:00
Link: CVE-2007-4460
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2007-08-21T21:17:00.000
Modified: 2008-09-05T21:28:17.690
Link: CVE-2007-4460
Redhat
No data.