Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) semi MIME library 1.14.5 and earlier, and (2) wemi 1.14.0 and possibly other versions, allows local users to overwrite arbitrary files via a symlink attack on temporary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SEMI/WEMI不安全方式创建临时文件漏洞
Vulnerability Description
semi是GNU Emacs的MIME库。 semi在建立临时文件时不充分进行安全检查,本地攻击者可以利用这个漏洞 通过符号连接攻击以运行Emacs和semi用户进程权限破坏系统任意文件。 wemi是semi的一个派生,同样存在此问题。目前没有提供详细漏洞细节。
CVSS Information
N/A
Vulnerability Type
N/A