CVE-2004-0372
Fixed in a distro release EPSS <1%
xine allows local users to overwrite arbitrary files via a symlink attack on a bug report email that is generated by the (1) xine-bugreport or (2) xine-check scripts.
Products: xine
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | xine-ui | 0.99.1-1 |
| Debian 13 | xine-ui | 0.99.1-1 |
| Debian 14 | xine-ui | 0.99.1-1 |
| Debian 3.0 | xine-ui | 0.9.8-5 |