Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-4460
HistoryAug 21, 2007 - 9:17 p.m.

CVE-2007-4460

2007-08-2121:17:00
[email protected]
web.nvd.nist.gov
34
id3lib
libid3
renderv2tofile
symlink attack
security vulnerability
cve-2007-4460
nvd

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.2%

JSON

The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.

Affected configurations

NVD
Node
id3libid3libMatch3.8.3
CPENameOperatorVersion
id3lib:id3libid3libeq3.8.3

Related

nessus 9
gentoo 1
securityvulns 2
cvelist 1
nvd 1
debiancve 1
openvas 18
debian 3
fedora 1
ubuntucve 1
freebsd 1
prion 1
nessus
nessus
FreeBSD : id3lib -- insecure temporary file creation (15ec9123-7061-11dc-b372-001921ab2fa4)
2007-10-03 00:00:00
Fedora 7 : id3lib-3.8.3-17.fc7 (2007-1774)
2007-11-06 00:00:00
GLSA-200709-08 : id3lib: Insecure temporary file creation
2007-09-24 00:00:00
gentoo
gentoo
id3lib: Insecure temporary file creation
2007-09-15 00:00:00
securityvulns
securityvulns
id3lib symbolic links security vulnerability
2007-09-11 00:00:00
[SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service
2007-09-11 00:00:00
cvelist
cvelist
CVE-2007-4460
2007-08-21 21:00:00
nvd
nvd
CVE-2007-4460
2007-08-21 21:17:00
debiancve
debiancve
CVE-2007-4460
2007-08-21 21:17:00
openvas
openvas
Gentoo Security Advisory GLSA 200709-08 (id3lib)
2008-09-24 00:00:00
FreeBSD Ports: id3lib
2008-09-04 00:00:00
Mandriva Update for id3lib MDKSA-2007:180 (id3lib)
2009-04-09 00:00:00
debian
debian
[SECURITY] [DSA 1365-3] New id3lib3.8.3 packages fix denial of service
2007-10-02 08:47:49
[SECURITY] [DSA 1365-1] New id3lib3.8.3 packages fix denial of service
2007-09-01 11:48:26
[SECURITY] [DSA 1365-2] New id3lib3.8.3 packages fix denial of service
2007-09-09 21:28:34
fedora
fedora
[SECURITY] Fedora 7 Update: id3lib-3.8.3-17.fc7
2007-08-24 05:40:57
ubuntucve
ubuntucve
CVE-2007-4460
2007-08-21 00:00:00
freebsd
freebsd
id3lib -- insecure temporary file creation
2007-08-20 00:00:00
prion
prion
Design/Logic Flaw
2007-08-21 21:17:00

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

5.8 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

10.2%

JSON
Related for CVE-2007-4460
nessus9gentoo1securityvulns2cvelist1nvd1debiancve1openvas18debian3fedora1ubuntucve1freebsd1prion1