feynmf.pl in feynmf 1.08, as used in TeXLive 2007, allows local users to overwrite arbitrary files and execute arbitrary code via a symlink attack on the feynmf$$.pl temporary file.
References
Configurations
Information
Published : 2007-11-13 15:46
Updated : 2011-03-07 19:01
NVD link : CVE-2007-5940
Mitre link : CVE-2007-5940
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
tug
- texlive_2007