CVE-2007-6061 Path traversal in n/a

Medium 5.0 Published 20 Nov 2007 Updated 7 Aug 2024

Local attackers can cause denial of service or delete arbitrary files via symlink attacks due to predictable temporary directory names in Audacity.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: Available

What is CVE-2007-6061?

CVE-2007-6061 is a medium-severity path traversal vulnerability in n/a, published on 20 Nov 2007. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

Audacity 1.3.2 creates a temporary directory with a predictable name without checking for previous existence of that directory, which allows local users to cause a denial of service (recording deadlock) by creating the directory before Audacity is run. NOTE: this issue can be leveraged to delete arbitrary files or directories via a symlink attack.

Weakness: CWE-59

Which versions are affected by CVE-2007-6061?

It affects 1 product.

Linux distribution packages (1)

audacity openSUSE:Tumbleweed All versions 3.0.4-1.2

Products include Audacityteam Audacity.

How do I fix CVE-2007-6061?

Upgrade to a fixed version.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2007-6061 being exploited?

There is no known exploitation of CVE-2007-6061 in the wild and no public exploit code.

Sources

Also known as DEBIAN-CVE-2007-6061, GHSA-3pxp-pwrp-2w6f, openSUSE-SU-2024:10639-1.