CVE-2007-3531 The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.
MediumCVSS 6.6
EPSS 0.29%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The set_default_speeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo nvclock | <= 0.7 | No fix listed |
References
- bugs.gentoo.org
- 38573 vdb-entry
- 26200 third-party-advisory vendor-advisory
- 26208 patch third-party-advisory vendor-advisory
- GLSA-200707-08 vendor-advisory
- 25052 vdb-entry
- nvclock-setdefaultspeeds-symlink(35584) vdb-entry