QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2007-6061

Back to search

CVE-2007-6061

Published: Nov 20, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

VendorProductVersions

n/a

n/a

affected
n/a

References

29206
third-party-advisory
x_refsource_SECUNIA
26608
vdb-entry
x_refsource_BID
ADV-2007-4025
vdb-entry
x_refsource_VUPEN
FEDORA-2008-3511
vendor-advisory
x_refsource_FEDORA
GLSA-200803-03
vendor-advisory
x_refsource_GENTOO
27841
third-party-advisory
x_refsource_SECUNIA
FEDORA-2008-3456
vendor-advisory
x_refsource_FEDORA
MDVSA-2008:074
vendor-advisory
x_refsource_MANDRIVA
30191
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now