kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Kpopper |
Kpopper |
1.0 (including) |
1.0 (including) |
References