Security Advisory

CVE-2014-2893

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2014-04-23 14:00:00
Last updated 2024-08-06 10:28:46
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names.