CVE-2008-3699

EPSS 0.03%

發布日:2008/8/14修改日:2026/4/28

描述

The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.

受影響套件(1)

Debian/amarokfrom 0, < 1.4.10-1

參考連結(1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2008-3699