CVE-2011-4606

Name of the Vulnerable Software and Affected Versions Artsoft Entertainment Rocks'n'Diamonds versions 3.3.0.1

Description The issue allows local users to overwrite arbitrary files via a symlink attack on the .rocksndiamonds/cache/artworkinfo.cache file under a user's home directory.

Recommendations For version 3.3.0.1, consider restricting write access to the .rocksndiamonds/cache/artworkinfo.cache file to prevent arbitrary file overwrites. As a temporary workaround, avoid using the artworkinfo.cache file until a patch is available.