PT-2011-5009
CVE-2011-4606
·
تاريخ النشر
2011-12-15
·
تاريخ التحديث
2024-06-15
الوصف من
CVSS 2.0
3.6
منخفضةالمقاييسAV:L/AC:L/Au:N/C:N/I:P/A:P
Name of the Vulnerable Software and Affected Versions
Artsoft Entertainment Rocks'n'Diamonds versions 3.3.0.1
Description
The issue allows local users to overwrite arbitrary files via a symlink attack on the .rocksndiamonds/cache/artworkinfo.cache file under a user's home directory.
Recommendations
For version 3.3.0.1, consider restricting write access to the .rocksndiamonds/cache/artworkinfo.cache file to prevent arbitrary file overwrites. As a temporary workaround, avoid using the
artworkinfo.cache file until a patch is available. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾