ocrodjvu is vulnerable to Arbitrary File Modification via symlink attack

보통 6.2CVE-2010-4338 · GHSA-5pjj-7m4p-wfh2 · PYSEC-2026-886 · Published 20/01/2011 · updated 16/06/2026

요약

CVE-2010-4338은(는) ocrodjvu, ocrodjvu (jwilk)에 영향을 주는 보통 (CVSS 6.2) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.32%, 전체 취약점의 24.8%보다 높음.
조치: 0.4.6-2 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
ocrodjvu PyPI	`≥ 0.4.6-1, < 0.4.6-2`	`0.4.6-2`
ocrodjvu jwilk	`= 0.4.6-1`	No fix yet

Description

ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

NVD description

ocrodjvu 0.4.6-1 on Debian GNU/Linux allows local users to modify arbitrary files via a symlink attack on temporary files that are generated when Cuneiform is invoked as the OCR engine.

References

nvd.nist.gov/vuln/detail/CVE-2010-4338 · ADVISORY
exchange.xforce.ibmcloud.com/vulnerabilities/64892 · WEB
jwilk-archive/ocrodjvu · PACKAGE
web.archive.org/web/20200229160520/http://www.securityfocus.com/bid/45234 · WEB
bugs.debian.org/cgi-bin/bugreport.cgi · WEB
securityfocus.com/bid/45234
pypi.org/project/ocrodjvu · PACKAGE
GitHub Advisory GHSA-5pjj-7m4p-wfh2 · ADVISORY

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free