| Package | Affected versions | Patched versions |
|---|---|---|
| flite | = 1.4 |
The play_wave_from_socket function in audio/auserver.c in Flite 1.4 allows local users to modify arbitrary files via a symlink attack on /tmp/awb.wav. NOTE: some of these details are obtained from third party information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free