CVE-2011-0702
14.02.2011, 21:00
The feh_unique_filename function in utils.c in feh before 1.11.2 might allow local users to overwrite arbitrary files via a symlink attack on a /tmp/feh_ temporary file.
Link Following
| Vendor | Product | Version |
|---|---|---|
| feh_project | feh | 𝑥 ≤ 1.11.1 |
| feh_project | feh | 1.3.5 |
| feh_project | feh | 1.4 |
| feh_project | feh | 1.4.1 |
| feh_project | feh | 1.4.2 |
| feh_project | feh | 1.4.3 |
| feh_project | feh | 1.5 |
| feh_project | feh | 1.6 |
| feh_project | feh | 1.6.1 |
| feh_project | feh | 1.7 |
| feh_project | feh | 1.8 |
| feh_project | feh | 1.9 |
| feh_project | feh | 1.10 |
| feh_project | feh | 1.10.1 |
| feh_project | feh | 1.11 |
𝑥
= Vulnerable software versions
Debian Releases
References