CVE-2012-3386 in libpng
Summary
The "make distcheck" rule in GNU Automake before 1.11.6 and 1.12.x before 1.12.2 grants world-writable permissions to the extraction directory, which introduces a race condition that allows local users to execute arbitrary code via unspecified vectors.
Reservation
06/14/2012
Disclosure
08/07/2012
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 5666 | libpng access control | 264 | Proof-of-Concept | Official fix | CVE-2012-3386 |