jwilk-archive/ocrodjvu · Security
ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack
- GHSA ID
- GHSA-5pjj-7m4p-wfh2
- CVE ID
- CVE-2010-4338
- Severity
- medium
- Published
- Updated
Description
ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.
CWEs
- CWE-59 · Improper Link Resolution Before File Access ('Link Following')