| Package | Affected versions | Patched versions |
|---|---|---|
| poppler | = 0.24.0= 0.24.1= 0.24.2≤ 0.24.3 |
The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free