Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-ged4-a25e-5bd6 |
| Summary | Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack. |
| Aliases |
|
| Fixed_packages |
|
| Affected_packages |
|
| References |
|
| Weaknesses |
| 0 |
| cwe_id |
377 |
| name |
Insecure Temporary File |
| description |
Creating and using insecure temporary files can leave application and system data vulnerable to attack. |
|
|
| Exploits |
|
| Severity_range_score | null |
| Exploitability | null |
| Weighted_severity | null |
| Risk_score | null |
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-ged4-a25e-5bd6 |