Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
babiloo 安全漏洞
Vulnerability Description
babiloo是一套用于阅读离线词典的开源软件。 babiloo 2.0.11之前的2.0.9版本中存在安全漏洞,该漏洞源于程序所创建的临时文件很容易被猜出文件名称。本地攻击者可利用该漏洞覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A