CVE-2005-3115 mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN].
LowCVSS 2.1
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
mpeg-tools before 1.5b-r2 creates multiple temporary files insecurely, which allows local users to overwrite arbitrary files via (1) ts.stat, (2) ts.mpg, (3) foobar, (4) blockbar, or (5) foobar[NNN].
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mpeg-tools | <= 1.5b_r1 | No fix listed |
References
- 17008 third-party-advisory
- 17051 third-party-advisory
- GLSA-200510-02 vendor-advisory
- 15002 vdb-entry
- bugs.gentoo.org