CVE-2013-4472

描述

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

受影響套件(2)

• Debian/popplerfrom 0
• Debian/xpdffrom 0

參考連結(1)

• ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2013-4472