romload.c in DGen Emulator 1.23 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary files during decompression of (1) gzip or (2) bzip ROM files.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Emulator | Dgen | 1.17 | 1.17 |
Emulator | Dgen | 1.16 | 1.16 |
Emulator | Dgen | 1.21 | 1.21 |
Emulator | Dgen | 1.15 | 1.15 |
Emulator | Dgen | 1.20 | 1.20 |
Emulator | Dgen | 1.23 | 1.23 |
Emulator | Dgen | 1.22 | 1.22 |
Emulator | Dgen | 1.18 | 1.18 |
Emulator | Dgen | 1.20_a | 1.20_a |