Fedora 7 : audacity-1.3.2-21.fc7 (2008-3511)

A local attacker could exploit Audacity's insecure handling of the directory for temporary files to conduct symlink attacks in order to delete arbitrary files and directories with the privileges of the user running Audacity. Note that Tenable Network Security has extracted the preceding descripti...

Fedora 8 : audacity-1.3.2-21.fc8 (2008-3456)

A local attacker could exploit Audacity's insecure handling of the directory for temporary files to conduct symlink attacks in order to delete arbitrary files and directories with the privileges of the user running Audacity. Note that Tenable Network Security has extracted the preceding descripti...

[SECURITY] Fedora 7 Update: audacity-1.3.2-21.fc7

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3 files. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWindows and the audio I/O...

[SECURITY] Fedora 8 Update: audacity-1.3.2-21.fc8

Audacity is a cross-platform multitrack audio editor. It allows you to record sounds directly or to import Ogg, WAV, AIFF, AU, IRCAM, or MP3 files. It features a few simple effects, all of the editing features you should need, and unlimited undo. The GUI was built with wxWindows and the audio I/O...

GLSA-200803-03 : Audacity: Insecure temporary file creation

The remote host is affected by the vulnerability described in GLSA-200803-03 Audacity: Insecure temporary file creation Viktor Griph reported that the 'AudacityApp::OnInit' method in file src/AudacityApp.cpp does not handle temporary files properly. Impact : A local attacker could exploit this...

[ GLSA 200803-03 ] Audacity: Insecure temporary file creation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200803-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - -...

Audacity symbolic links vulnerability

Unsafe temporary files creation...

Audacity: Insecure temporary file creation

Background Audacity is a free cross-platform audio editor. Description Viktor Griph reported that the "AudacityApp::OnInit" method in file src/AudacityApp.cpp does not handle temporary files properly. Impact A local attacker could exploit this vulnerability to conduct symlink attacks to delete...

Design/Logic Flaw

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

DEBIAN-CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061

CVE-2007-6061 affects Audacity 1.3.2, where Audacity creates a temporary directory with a predictable name without checking for prior existence, allowing local users to trigger a denial of service (recording deadlock) and potentially delete arbitrary files via a symlink attack. Connected advisori...

CVE-2007-6061

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

CVE-2007-6061: Improper Link Resolution Before File Access

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service recording deadlock by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete...

MDKA-2006:054 : audacity

For the French locale, menu items which contained accented characters do not show up in the Audacity sound editor. This is because the French translation file was not in the correct character encoding. This issue is corrected in the updated packages. %NASLMINLEVEL 999999 @DEPRECATED@ This script...