| Package | Affected versions | Patched versions |
|---|---|---|
| xscreensaver | = 4.14 |
Xscreensaver 4.14 contains certain debugging code that should have been omitted, which causes Xscreensaver to create temporary files insecurely in the (1) apple2, (2) xanalogtv, and (3) pong screensavers, and allows local users to overwrite arbitrary files via a symlink attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free