Vulnerability Details CVE-2005-3012
The MasterDataCD::createImage function in masterdatacd.cpp for SimpleCDR-X 1.3.3 creates the .temp temporary directory with insecure permissions, which allows local users to read sensitive ISO images.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 35.4%
CVSS Severity
CVSS v2 Score 2.1
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037174.html
- http://secunia.com/advisories/16835
- http://www.securityfocus.com/bid/14855
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-September/037174.html
- http://secunia.com/advisories/16835
- http://www.securityfocus.com/bid/14855
Products affected by CVE-2005-3012
-
cpe:2.3:a:simplecdr-x:simplecdr-x:1.3.3