pdfjam creates the (1) pdf90, (2) pdfjoin, and (3) pdfnup files with a predictable name, which allows local users to overwrite arbitrary files via a symlink attack.
References
Configurations
Information
Published : 2008-12-26 13:30
Updated : 2017-08-07 18:33
NVD link : CVE-2008-5743
Mitre link : CVE-2008-5743
JSON object : View
CWE
CWE-59
Improper Link Resolution Before File Access ('Link Following')
Products Affected
pdfjam
- pdfjam