aview: Insecure temporary file usage

1. Gentoo Linux Security Advisory

Package	Vulnerable versions	Unaffected versions	Architecture(s)
media-gfx/aview	< 1.3.0_rc1-r1	>= 1.3.0_rc1-r1	All supported architectures

Related bugreports: #235808

An insecure temporary file usage has been reported in aview, leading to symlink attacks.

2. Impact Information

aview is an ASCII image viewer and animation player.

Dmitry E. Oboukhov reported that aview uses the "/tmp/aview$$.pgm" file in an insecure manner when processing files.

A local attacker could perform symlink attacks to overwrite arbitrary files on the system with the privileges of the user running the application.

3. Resolution Information

There is no known workaround at this time.

All aview users should upgrade to the latest version:

Code Listing 3.1: Resolution

# emerge --sync
# emerge --ask --oneshot --verbose ">=media-gfx/aview-1.3.0_rc1-r1"

4. References

Page updated December 14, 2008

Summary: This is a Gentoo Linux Security Advisory

Security Team
Contact Address

Donate to support our development efforts.