CVE-2007-2056

Unknown

Description

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race"). NOTE: the researcher has retracted the original advisory, stating that "the portion of vulnerable code is not called in any current version of AFFLIB and is therefore not exploitable.

SeverityUnknown

CVSS—

Exploit probability—

Product—

PublishedApr 30, 2007

First seenApr 30, 2007

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

Sources have not yet published the affected products and versions for this vulnerability.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.