CVE-2014-1838

The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and…

published March 11, 2014

CVSS
—
EPSS
0%
Percentile
26.6
In the wild
Unconfirmed
What it is

The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00343 · 26.6th percentile
Published
2014-03-11T15:00Z
EPSS history
Timeline
  • 11 MAR 15:00Z
    The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and…
    cvelistv5