CVE-2007-3531: Medium severity Gentoo Linux vulnerability
The setdefaultspeeds function in backend/backend.c in NVidia NVClock before 0.8b2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/nvclock temporary file.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-3531?
CVE-2007-3531 has a moderate severity rating due to its potential for local file overwrite vulnerabilities.
How do I fix CVE-2007-3531?
To fix CVE-2007-3531, upgrade NVClock to version 0.8b2 or later, which addresses the symlink vulnerability.
Who is affected by CVE-2007-3531?
CVE-2007-3531 affects local users running NVClock versions 0.7 or earlier on Gentoo Linux systems.
What is the impact of exploiting CVE-2007-3531?
Exploiting CVE-2007-3531 allows local users to overwrite arbitrary files on the system, potentially leading to data loss or system instability.
Is there a workaround for CVE-2007-3531?
A possible workaround for CVE-2007-3531 is to avoid using NVClock or secure the /tmp directory to limit symlink attacks.