CVE-2014-4978 The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-gra...
MediumCVSS 5.5
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The rs_filter_graph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on (1) /tmp/rs-filter-graph.png or (2) /tmp/rs-filter-graph.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rawstudio | = 2.0-1.1 | No fix listed |
| fedoraproject fedora | = 22 | No fix listed |
References
- FEDORA-2015-8196 issue-tracking third-party-advisory vendor-advisory
- [oss-security] 20140716 Re: CVE request: rawstudio: Insecure use of temporary file issue-tracking mailing-list third-party-advisory
- 68671 third-party-advisory vdb-entry
- bugs.debian.org issue-tracking mailing-list third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- rawstudio-rsfiltergraph-symlink(94633) third-party-advisory vdb-entry
- github.com issue-tracking patch third-party-advisory