CVE-2007-2056 — Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race")

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race")

Published Apr 30, 2007

No CVSS score

EPSS 0.04%

Description

Rejected reason: The getlock function in aimage/aimage.cpp in AFFLIB 2.2.8 and earlier allows local users to overwrite arbitrary files via a symlink attack on temporary lock files (aka "time-of-check-time-of-use file race"). NOTE: the researcher has retracted the original advisory, stating that "the portion of vulnerable code is not called in any current version of AFFLIB and is therefore not exploitable.

Affected products

Remediation

No remediation recorded yet.

Metrics

0.04% 0.00042

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Dec 12, 2024.

EPSS probability 0.00042

Score over time

Feb–Dec 2024

EPSS v3

Percentile over time

EPSS v3

Table of values (2 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Dec 12, 2024	0.04% (0.00042)	5.07th	v3 (v2023.03.01)
Feb 8, 2024	0.04% (0.00042)	5.47th	v3 (v2023.03.01)

Weaknesses (0)

No CWE recorded.

References (0)

No references for this CVE.

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status n/a

Assigner n/a

Published Apr 30, 2007

Updated n/a

Reserved n/a

Link CVE-2007-2056

CISA Vulnrichment

Updated n/a

NVD

Status Rejected

Modified Nov 7, 2023

Link CVE-2007-2056

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-2056