CVE-2007-2056

View on CVE.org
Published Apr 30, 2007 CVSS n/a EPSS n/a KEV · Not listed
Description
The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race"). NOTE: the researcher has retracted the original advisory, stating that "the portion of vulnerable code is not called in any current version of AFFLIB and is therefore not exploitable.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History

No history.

Subscriptions

No data.

Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
mitre
Published
Updated
Oct 19, 2018, 2:57 PM
Reserved
Apr 16, 2007, 12:00 AM

View source JSON

No data.

Status
Rejected
Published
Apr 30, 2007, 10:19 PM
Modified
Nov 7, 2023, 2:00 AM

View source JSON

No data.

No data.