CVE-2014-1934

Advisory

tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.


CONFIRM:https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737062: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737062
CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=1063671: https://bugzilla.redhat.com/show_bug.cgi?id=1063671
SUSE:openSUSE-SU-2014:0619: http://lists.opensuse.org/opensuse-updates/2014-05/msg00027.html
SUSE:openSUSE-SU-2014:0620: http://lists.opensuse.org/opensuse-updates/2014-05/msg00028.html

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-1934
• http://lists.opensuse.org/opensuse-updates/2014-05/msg00027.html
• http://lists.opensuse.org/opensuse-updates/2014-05/msg00028.html
• https://bugzilla.redhat.com/show_bug.cgi?id=1063671
• https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=737062