CVE-2013-4472

ADVISORY - nist

Summary

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.

EPSS Score⁠: 0.00367 (0.287)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-59⁠

Improper Link Resolution Before File Access ('Link Following')

ADVISORY - redhat

CWE-377⁠

Insecure Temporary File

Impacted images

Advisories

NIST

CREATED

12 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2013-4472⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-59⁠

CVSS SCORE

3.3low

Debian

CREATED

12 years ago

UPDATED

24 days ago

ADVISORY IDCVE-2013-4472⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Alow

Ubuntu

CREATED

12 years ago

UPDATED

2 years ago

ADVISORY IDCVE-2013-4472⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Amedium

Red Hat

CREATED

13 years ago

UPDATED

9 months ago

ADVISORY IDCVE-2013-4472⁠

EXPLOITABILITY SCORE

3.4

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-377⁠

CVSS SCORE

1.9low