CVE-2011-1136

01/תיאור (מקור, אנגלית)

In tesseract 2.03 and 2.04, an attacker can rewrite an arbitrary user file by guessing the PID and creating a link to the user's file.

02/מוצרים מושפעים

tesseract-ocr: tesseract ocr; debian: debian linux

03/קישורים6

• bugs.debian.org/cgi-bin/bugreport.cgi?bug=612032 ExploitMailing ListPatchThird Party Advisory
• bugs.debian.org/cgi-bin/bugreport.cgi?bug=612032 ExploitMailing ListPatchThird Party Advisory
• bugs.launchpad.net/ubuntu/+source/tesseract/+bug/607297 ExploitIssue TrackingThird Party Advisory
• bugs.launchpad.net/ubuntu/+source/tesseract/+bug/607297 ExploitIssue TrackingThird Party Advisory
• security-tracker.debian.org/tracker/CVE-2011-1136 Third Party Advisory
• security-tracker.debian.org/tracker/CVE-2011-1136 Third Party Advisory