NVD

Id
49224  
Name
CVE-2009-1962  
Description
Xfig, possibly 3.2.5, allows local users to read and write arbitrary files via a symlink attack on the (1) xfig-eps[PID], (2) xfig-pic[PID].pix, (3) xfig-pic[PID].err, (4) xfig-pcx[PID].pix, (5) xfig-xfigrc[PID], (6) xfig[PID], (7) xfig-print[PID], (8) xfig-export[PID].err, (9) xfig-batch[PID], (10) xfig-exp[PID], or (11) xfig-spell.[PID] temporary files, where [PID] is a process ID.  
Reject
 
CVSS Version
2  
CVSS Score
4.4  
Severity
Medium  
CVSS Base Score
4.4  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-06-07  
Modified Date
2010-03-06  
Seq
2009-1962  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
249302 49224 CVE-2009-1962 MDVSA-2009:244  View
249303 49224 CVE-2009-1962 [oss-security] 20090401 CVE id rquest: xfig insecure tmp files  View
249304 49224 CVE-2009-1962 34328  View
249305 49224 CVE-2009-1962 xfig-temp-symlink(49600)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45055 JVNDB-2009-006062 Xfig における任意のファイルを読み取られる脆弱性 Xfig には、任意のファイルを読み取られる、および書き込まれる脆弱性が存在します。 CVE-2009-1962 39393 CVE-2009-1962 49224 4.4 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006062.html 2009-06-07 2012-12-20 View