The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-graph.
References
Configurations
History
21 Nov 2024, 02:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://lists.fedoraproject.org/pipermail/package-announce/2015-July/162109.html - Issue Tracking, Third Party Advisory | |
| References | () http://www.openwall.com/lists/oss-security/2014/07/16/15 - Issue Tracking, Mailing List, Third Party Advisory | |
| References | () http://www.securityfocus.com/bid/68671 - Third Party Advisory, VDB Entry | |
| References | () https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754899 - Issue Tracking, Mailing List, Third Party Advisory | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1120093 - Issue Tracking, Third Party Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/94633 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/rawstudio/rawstudio/commit/9c2cd3c93c05d009a91d84eedbb85873b0cb505d - Issue Tracking, Patch, Third Party Advisory |
Information
Published : 2017-12-29 22:29
Updated : 2024-11-21 02:11
NVD link : CVE-2014-4978
Mitre link : CVE-2014-4978
CVE.ORG link : CVE-2014-4978
JSON object : View
Products Affected
fedoraproject
- fedora
rawstudio
- rawstudio
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')