CVE-2012-2093
src/common/latex.py in Gajim 0.15 allows local users to overwrite arbitrary files via a symlink attack on a temporary latex file, related to the get_tmpfile_name function.
- EPSS
- 0.4% chance of exploitation in the next 30 days; higher than 29% of CVEs (scores of 2026-10-31)
- CWE
- CWE-59
- Published
- Modified
- Record from
- the NVD, synced
Affected
- gajim:gajim
References
- http://hg.gajim.org/gajim/rev/f046e4aaf7d4
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079169.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079237.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/079241.html
- http://secunia.com/advisories/48695