Vulnerabilities (CVE)

Filtered by vendor Synaesthesia Subscribe
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2004-0160 1 Synaesthesia 1 Synaesthesia 2025-04-03 7.2 HIGH N/A
Synaesthesia 2.2 and earlier allows local users to execute arbitrary code via a symlink attack on the configuration file.
CVE-2005-0070 1 Synaesthesia 1 Synaesthesia 2025-04-03 7.2 HIGH N/A
Synaesthesia 2.1 and earlier, and possibly other versions, when installed setuid root, does not drop privileges before processing configuration and mixer files, which allows local users to read arbitrary files.