Artsoft Entertainment Rocks’n’Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user’s home directory.
CPE | Name | Operator | Version |
---|---|---|---|
rocks\\'n\\'diamonds | eq | 3.3.0.1 |