Vulnerability in Simplecdr-X
CVE-2005-3012
The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images.
EPSS: 0.004 (35.9th percentile) — read the EPSS interpretation.
Affected products
- Simplecdr-x — versions 1.3.3
- N/a — versions n/a
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)