CVE-2004-0372

EPSS 0.14%

xine-ui - insecure temporary file creation

Published: 4/15/2004Modified: 4/28/2026

Description

xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.

Affected packages (2)

Debian/xine-uifrom 0, < 0.99.1-1
Debian/xine-uifrom 0, < 0.9.8-5

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2004-0372