The RenderV2ToFile function in tag_file.cpp in id3lib (aka libid3) 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged.
CVSS Details
- CVSS 3.1 Base Score: 7.8
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade id3lib3.8.3 | Jul 30, 2024 | Aug 21, 2007 |
| Freebsd | — | Upgrade id3lib | Dec 10, 2025 | Oct 1, 2007 |
| Gentoo Linux | — | Upgrade media-libs/id3lib. | Oct 30, 2017 | Aug 21, 2007 |
| Oracle Solaris | — | Upgrade image/editor/gimp to version 2.6.10-0.175.1.10.0.4.0 on Solaris 11.1Upgrade image/library/gegl to version 0.1.2-0.175.1.10.0.4.0 on Solaris 11.1Upgrade desktop/time-slider to version 0.2.102-0.175.1.10.0.4.0 on Solaris 11.1Upgrade library/id3lib to version 3.8.3-0.175.1.10.0.4.0 on Solaris 11.1Upgrade consolidation/desktop/desktop-incorporation to version 0.5.11-0.175.2.0.0.42.0 on Solaris 11.2 | May 29, 2017 | Aug 21, 2007 |
| Suse | — | Upgrade suse-releaseUpgrade id3lib-examplesUpgrade id3libUpgrade id3lib-devel | Feb 17, 2015 | Aug 21, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub