CVE-2013-0159

HIGH

fedora-business-cards - Symlink Attack via /tmp/fedora-business-cards-buffer.svg

Title source: llm

Description

The fedora-business-cards package before 1-0.1.beta1.fc17 on Fedora 17 and before 1-0.1.beta1.fc18 on Fedora 18 allows local users to cause a denial of service or write to arbitrary files via a symlink attack on /tmp/fedora-business-cards-buffer.svg.

References (2)

Core 2

Core References

Issue Tracking, Patch, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=892299

Issue Tracking, Third Party Advisory x_refsource_confirm

https://bugzilla.redhat.com/show_bug.cgi?id=892815

Scores

CVSS v3 7.1

EPSS 0.0034

EPSS Percentile 26.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Details

CWE

CWE-59

Status published

Products (2)

fedoraproject/fedora 17

fedoraproject/fedora 18

Published May 01, 2018

Tracked Since Feb 18, 2026