Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Berkeley MPEG Tools: multiple insecure temporary files

Package(s):

mpeg-tools

CVE #(s):

CAN-2005-3115

Created:

October 3, 2005

Updated:

October 5, 2005

Description:

Mike Frysinger of the Gentoo Security Team discovered that mpeg_encode and the conversion utilities were creating temporary files with predictable or fixed filenames. The 'test' make target of the MPEG Tools also relied on several temporary files created insecurely.

Alerts:

Gentoo

200510-02

2005-10-03

(Log in to post comments)