Description
chm2pdf 0.9 uses temporary files in directories with fixed names, which allows local users to cause a denial of service (chm2pdf failure) of other users by creating those directories ahead of time.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://secunia.com/advisories/32257 ↗
- http://www.vupen.com/english/advisories/2011/0236 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053501.html ↗
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=501959 ↗
- http://secunia.com/advisories/43109 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45813 ↗
- http://www.securityfocus.com/bid/31735 ↗
- http://lists.fedoraproject.org/pipermail/package-announce/2011-January/053510.html ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47030 ↗