CVE-2014-4978

🗓️ 29 Dec 2017 22:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 76 Views🌐 WEB

The rs_filter_graph function in librawstudio might allow local users to truncate arbitrary files via a symlink attack

Reporter	Title	Published	Views	Family All 11
Cvelist	CVE-2014-4978	29 Dec 201722:00	–	cvelist
EUVD	EUVD-2014-4893	7 Oct 202500:30	–	euvd
Fedora	[SECURITY] Fedora 22 Update: rawstudio-2.1-0.1.20150511git983bda1.fc22	18 Jul 201502:03	–	fedora
Tenable Nessus	Fedora 22 : rawstudio-2.1-0.1.20150511git983bda1.fc22 (2015-8196)	20 Jul 201500:00	–	nessus
Mend	CVE-2014-4978	29 Dec 201722:00	–	mend
NVD	CVE-2014-4978	29 Dec 201722:29	–	nvd
OpenVAS	Fedora Update for rawstudio FEDORA-2015-8196	18 Jul 201500:00	–	openvas
Prion	Design/Logic Flaw	29 Dec 201722:29	–	prion
Positive Technologies	PT-2017-5941	29 Dec 201700:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2014-4978: Improper Link Resolution Before File Access	29 Dec 201700:00	–	rapid7

NVD

Node

Node

Source	Link
securityfocus	www.securityfocus.com/bid/68671
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/94633
github	www.github.com/rawstudio/rawstudio/commit/9c2cd3c93c05d009a91d84eedbb85873b0cb505d
openwall	www.openwall.com/lists/oss-security/2014/07/16/15
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
lists	www.lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.html
bugs	www.bugs.debian.org/cgi-bin/bugreport.cgi

Parameter	Position	Path	Description	CWE
/tmp/rs-filter-graph.png	path	/tmp/rs-filter-graph.png	Local users might truncate arbitrary files via a symlink attack on this path.	CWE-59
/tmp/rs-filter-graph	path	/tmp/rs-filter-graph	Local users might truncate arbitrary files via a symlink attack on this path.	CWE-59

17 Jun 2026 00:10Current

5.3Medium risk

Vulners AI Score5.3

CVSS 23.6

CVSS 35.5

EPSS0.0041