CVE-2007-6061

2007-11-2000:00:00

ubuntu.com

0.002 Low

EPSS

Percentile

57.4%

JSON

Audacity 1.3.2 creates a temporary directory with a predictable name
without checking for previous existence of that directory, which allows
local users to cause a denial of service (recording deadlock) by creating
the directory before Audacity is run. NOTE: this issue can be leveraged to
delete arbitrary files or directories via a symlink attack.

Bugs

<https://bugs.launchpad.net/ubuntu/+source/audacity/+bug/173153>

Notes

Author	Note
fujitsu	The denial of service requires changing the ownership of the directory after audacity is already running.

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchaudacity< 1.2.4b-2ubuntu2.1UNKNOWN
ubuntu7.04noarchaudacity< 1.2.6-0ubuntu1.1UNKNOWN
ubuntu7.10noarchaudacity< 1.3.3-1ubuntu0.1UNKNOWN