ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
Moderate severity
GitHub Reviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Feb 7, 2024
Description
Published by the National Vulnerability Database
Jan 20, 2011
Published to the GitHub Advisory Database
May 17, 2022
Reviewed
Feb 7, 2024
Last updated
Feb 7, 2024
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
References