CVE-2004-0770

romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2005-01-10

Last modified

2024-08-08

Affected products

• Debian Linux (Debian)
• Emulator (Dgen)

References

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=263282&archive=yes
• http://secunia.com/advisories/12214
• http://www.securityfocus.com/bid/10855
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16884