Unrated
CVE-2014-1838
The (1) extract_keys_from_pdf and (2) fill_pdf functions in pdf_ext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf.
Announced Group revision 1
Original source ↗CVE-2014-1838
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2014-1838
- Related CVEs
- CVE-2014-1838
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #83732 · Revision 1
- Added to Heist Feed
- Publisher date