3 matches found
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine...
CVE-2010-4338
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine...
PT-2011-1507
Name of the Vulnerable Software and Affected Versions ocrodjvu version 0.4.6-1 Description The issue allows local users to modify arbitrary files via a symlink attack on temporary files generated when Cuneiform is invoked as the OCR engine. Recommendations For ocrodjvu version 0.4.6-1, consider...