CVE-2014-0027

The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav

published January 26, 2014

CVSS
—
EPSS
0%
Percentile
24.9
In the wild
Unconfirmed
What it is

The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00331 · 24.9th percentile
Published
2014-01-26T01:00Z
EPSS history
Timeline
  • 26 JAN 01:00Z
    The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav
    cvelistv5