CVE-2014-2893

CVE-2014-2893 affects the GetHTMLRunDir function in the scan-build utility of Clang up to version 3.5 (and earlier). The issue permits local users to disclose sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names. Exploitation deta...