|
WmFrog Insecure Temporary File Creation Vulnerability
The WmFrog application creates temporary files in an insecure manner. An attacker with local access could potentially exploit this issue to perform symlink attacks, overwriting arbitrary files in the context of the affected application. An attacker may leverage this issue to corrupt or overwrite arbitrary files with the privileges of an unsuspecting user that activated the affected application. Reportedly, attackers can exploit this issue to escalate privileges. Versions prior to WmFrog 0.2.0 are vulnerable to this issue. |
|
|
Privacy Statement |
