CVE-2011-0702 in feh
Summary
The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 56486 | Daniel Friesel feh utils.c feh_unique_filename link following | 59 | Not defined | Official fix | CVE-2011-0702 |
Reservation
01/31/2011
Disclosure
02/14/2011
Status
Confirmed
Entries
1