CVE-2011-4606

Artsoft Rocks'n'Diamonds 3.3.0.1 - Arbitrary File Write via Symlink Attack on Cache File

Title source: llm
STIX 2.1

Description

Artsoft Entertainment Rocks'n'Diamonds (aka rocksndiamonds) 3.3.0.1 allows local users to overwrite arbitrary files via a symlink attack on .rocksndiamonds/cache/artworkinfo.cache under a user's home directory.

References (4)

Core 4
Core References
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/12/12/3
Mailing List mailing-list x_refsource_mlist
http://openwall.com/lists/oss-security/2011/12/12/2
Issue Tracking x_refsource_confirm
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651620

Scores

EPSS 0.0034
EPSS Percentile 26.7%

Details

CWE
CWE-264
Status published
Products (1)
artsoft/rocks\'n\'diamonds 3.3.0.1
Published Dec 15, 2011
Tracked Since Feb 18, 2026