CVE-2014-1934

Published: May 8, 2014Modified: May 6, 2026

3.3

Vector

AV:L/AC:M/Au:N/C:N/I:P/A:P

Exploitability: 3.4 / Impact: 4.9

Source: NVD

Description

tag.py in eyeD3 (aka python-eyed3) 7.0.3, 0.6.18, and earlier for Python allows local users to modify arbitrary files via a symlink attack on a temporary file.

Affected (29)

Products: Opensuse: Opensuse · Travis Shirk: Eyed3

1 product

1 product

Configuration A

29 vulnerable

Vulnerable Software	Affected Versions
Opensuse Opensuse	Version 12.3
Opensuse Opensuse	Version 13.1
Travis Shirk Eyed3	Up to 0.6.18
Travis Shirk Eyed3	Version 0.1.0
Travis Shirk Eyed3	Version 0.2.0
Travis Shirk Eyed3	Version 0.3.0
Travis Shirk Eyed3	Version 0.3.1
Travis Shirk Eyed3	Version 0.4.0
Travis Shirk Eyed3	Version 0.5.0
Travis Shirk Eyed3	Version 0.5.1
Travis Shirk Eyed3	Version 0.6.0
Travis Shirk Eyed3	Version 0.6.0 rc1
Travis Shirk Eyed3	Version 0.6.10
Travis Shirk Eyed3	Version 0.6.11
Travis Shirk Eyed3	Version 0.6.12
Travis Shirk Eyed3	Version 0.6.13
Travis Shirk Eyed3	Version 0.6.14
Travis Shirk Eyed3	Version 0.6.15
Travis Shirk Eyed3	Version 0.6.16
Travis Shirk Eyed3	Version 0.6.17
Travis Shirk Eyed3	Version 0.6.1
Travis Shirk Eyed3	Version 0.6.2
Travis Shirk Eyed3	Version 0.6.3
Travis Shirk Eyed3	Version 0.6.4
Travis Shirk Eyed3	Version 0.6.5
Travis Shirk Eyed3	Version 0.6.6
Travis Shirk Eyed3	Version 0.6.8
Travis Shirk Eyed3	Version 0.6.9
Travis Shirk Eyed3	Version 0.7.3