Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
skk (Simple Kana to Kanji conversion program) 12.1 and earlier, and the ddskk package which is based on skk, creates temporary files insecurely, which allows local users to overwrite arbitrary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SKK/DDSKK不安全临时文件漏洞
Vulnerability Description
Daredevil SKK是Emacs和XEmacs的输入法。 Daredevil SKK在建立临时文件时不充分进行安全检查,本地攻击者可以利用这个漏洞通过符号连接攻击,以运行Emacs和skk进程的用户权限破坏系统任意文件。 ddskk也同样包含此漏洞,目前没有详细漏洞细节提供。
CVSS Information
N/A
Vulnerability Type
N/A