run-mailcap in mime-support 3.22 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mime-support | Debian | 3.9 (including) | 3.9 (including) |
| Mime-support | Debian | 3.10 (including) | 3.10 (including) |
| Mime-support | Debian | 3.11 (including) | 3.11 (including) |
| Mime-support | Debian | 3.12 (including) | 3.12 (including) |
| Mime-support | Debian | 3.13 (including) | 3.13 (including) |
| Mime-support | Debian | 3.14 (including) | 3.14 (including) |
| Mime-support | Debian | 3.15 (including) | 3.15 (including) |
| Mime-support | Debian | 3.16 (including) | 3.16 (including) |
| Mime-support | Debian | 3.17 (including) | 3.17 (including) |
| Mime-support | Debian | 3.18 (including) | 3.18 (including) |
| Mime-support | Debian | 3.19 (including) | 3.19 (including) |
| Mime-support | Debian | 3.20 (including) | 3.20 (including) |
| Mime-support | Debian | 3.21 (including) | 3.21 (including) |