diff --git a/security/vuxml/vuln.xml b/security/vuxml/vuln.xml index 0103d73c5120..ff441bb36e6a 100644 --- a/security/vuxml/vuln.xml +++ b/security/vuxml/vuln.xml @@ -34,6 +34,35 @@ Note: Please add new entries to the beginning of this file. --> + + id3lib -- insecure temporary file creation + + + id3lib + 0 + + + + +

Debian Bug report log reports:

+
+

When tagging file $foo, a temporary copy of the file is + created, and for some reason, libid3 doesn't use mkstemp + but just creates $foo.XXXXXX literally, without any checking.

+

This would silently truncate and overwrite an existing $foo.XXXXXX.

+
+ + + + 25372 + CVE-2007-4460 + + + 2007-08-20 + 2007-10-01 + + + mediawiki -- cross site scripting vulnerability