The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade id3lib3.8.3 | Jul 30, 2024 | Aug 21, 2007 |
| Freebsd | — | Upgrade id3lib | Dec 10, 2025 | Oct 1, 2007 |
| Gentoo Linux | — | Upgrade media-libs/id3lib. | Oct 30, 2017 | Aug 21, 2007 |
| Oracle Solaris | — | Upgrade image/library/gegl to version 0.1.2-0.175.1.10.0.4.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2Upgrade library/id3lib to version 3.8.3-0.175.1.10.0.4.0 on Solaris 11.1Upgrade desktop/time-slider to version 0.2.102-0.175.1.10.0.4.0 on Solaris 11.1Upgrade image/editor/gimp to version 2.6.10-0.175.1.10.0.4.0 on Solaris 11.1 | May 29, 2017 | Aug 21, 2007 |
| Suse | — | Upgrade id3lib | Feb 17, 2015 | Jul 9, 2013 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub