CVE-2014-2893

Name of the Vulnerable Software and Affected Versions Clang versions 3.5 and earlier

Description The issue allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names. This is due to a problem in the GetHTMLRunDir function in the scan-build utility.

Recommendations For Clang versions 3.5 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.