| Package | Affected versions | Patched versions |
|---|---|---|
| pdftops | ≤ 1.1.19rc1 |
pdftops.pl before 1.20 in alternate pdftops filter allows local users to overwrite arbitrary files via a symlink attack on the pdfin.[PID].tmp temporary file, which is created when pdftops reads a PDF file from stdin, such as when pdftops is invoked by CUPS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free