Back to feed
EUVD-2008-3685 · Published Aug 14, 2008
The MagnatuneBrowser::listDownloadComplete function in magnatunebrowser/magnatunebrowser.cpp in Amarok before 1.4.10 allows local users to overwrite arbitrary files via a symlink attack on the album_info.xml temporary file.
Technologies
Amarok Amarok
Weaknesses
CWE-59
CVSS scores
- v2.03.3
AV:L/AC:M/Au:N/C:N/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Execution Persistence Privilege Escalation Stealth
References
Potentially impacted assets
See if this affects your attack surface
